Not yet scoredPublished Dec 24, 2025

CVE-2023-54147media: platform: mtk-mdp3: Add missing check and free for ida_alloc

Updated under an hour ago (Oct 26, 2026, 1:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check for the return value of the ida_alloc in order to avoid NULL pointer dereference. Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order to avoid memory leak.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	61890ccaefaff89f5babd2c8412fd222c3f5fe38 builds before 51fc1880e47421ee7b192372e8e86b7bbba40776; 61890ccaefaff89f5babd2c8412fd222c3f5fe38 builds before 4c173a65a2b1cc0556c3f6f0bab82e4fdb449522; 61890ccaefaff89f5babd2c8412fd222c3f5fe38 builds before 22b72cad501fb75500cc60af4d92de3066fb6fc2; from 61890ccaefaff89f5babd2c8412fd222c3f5fe38 before d00f592250782538cda87745607695b0fe27dcd4	CNA record

References

References

https://git.kernel.org/stable/c/51fc1880e47421ee7b192372e8e86b7bbba40776
https://git.kernel.org/stable/c/4c173a65a2b1cc0556c3f6f0bab82e4fdb449522
https://git.kernel.org/stable/c/22b72cad501fb75500cc60af4d92de3066fb6fc2
https://git.kernel.org/stable/c/d00f592250782538cda87745607695b0fe27dcd4

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.