Back to CVE records
Not yet scoredPublished Dec 24, 2025

CVE-2023-54143media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() If we encounter any error in the vdec_msg_queue_init() then we need to set "msg_queue->wdma_addr.size = 0;". Normally, this is done inside the vdec_msg_queue_deinit() function. However, if the first call to allocate &msg_queue->wdma_addr fails, then the vdec_msg_queue_deinit() function is a no-op. For that situation, just set the size to zero explicitly and return. There were two other error paths which did not clean up before returning. Change those error paths to goto mem_alloc_err.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from b199fe46f35c57a415acd4d5295b0f4e35048c11 before 858322c409e0aba8f70810d23f35c482744f007c; from b199fe46f35c57a415acd4d5295b0f4e35048c11 before b7dbc27301f560c3b915235c53383155b3512083; from b199fe46f35c57a415acd4d5295b0f4e35048c11 before 451dc187cadd47771e5d9434fe220fad7be84057; from b199fe46f35c57a415acd4d5295b0f4e35048c11 before cf10b0bb503c974ba049d6f888b21178be20a962
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
CVE-2023-54143: media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() | InfoSec Signals