CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP
In the Linux kernel, the following vulnerability has been resolved:
media: mtk-vcodec: potential null pointer deference in SCP
The return value of devmkzalloc() needs to be checked to avoid NULL pointer deference. This is similar to CVE-2022-3113.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40973?
CVE-2024-40973 has a medium severity due to the potential for a null pointer dereference in the Linux kernel.
How do I fix CVE-2024-40973?
To fix CVE-2024-40973, update to the patched versions of the Linux kernel, specifically 6.12.10-1 or 6.12.11-1.
Which versions of the Linux kernel are affected by CVE-2024-40973?
CVE-2024-40973 affects Linux kernel versions up to 6.6.36 and from 6.7 to 6.9.7.
What components are impacted by CVE-2024-40973?
CVE-2024-40973 impacts the media component related to mtk-vcodec in the Linux kernel.
Is CVE-2024-40973 similar to any other vulnerabilities?
Yes, CVE-2024-40973 is similar to CVE-2022-3113 regarding null pointer dereference issues.