{"schema_version":"1.9.0","id":"CVE-2023-54143","published":"2025-12-24T13:06:56.869Z","modified":"2026-08-12T03:51:43.693795198Z","related":["SUSE-SU-2026:0278-1","SUSE-SU-2026:0281-1","SUSE-SU-2026:0293-1","SUSE-SU-2026:0315-1","SUSE-SU-2026:20477-1","SUSE-SU-2026:20498-1","SUSE-SU-2026:20845-1","SUSE-SU-2026:20876-1"],"summary":"media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()\n\nIf we encounter any error in the vdec_msg_queue_init() then we need\nto set \"msg_queue->wdma_addr.size = 0;\".  Normally, this is done\ninside the vdec_msg_queue_deinit() function.  However, if the\nfirst call to allocate &msg_queue->wdma_addr fails, then the\nvdec_msg_queue_deinit() function is a no-op.  For that situation, just\nset the size to zero explicitly and return.\n\nThere were two other error paths which did not clean up before returning.\nChange those error paths to goto mem_alloc_err.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"b199fe46f35c57a415acd4d5295b0f4e35048c11"},{"fixed":"858322c409e0aba8f70810d23f35c482744f007c"},{"fixed":"b7dbc27301f560c3b915235c53383155b3512083"},{"fixed":"451dc187cadd47771e5d9434fe220fad7be84057"},{"fixed":"cf10b0bb503c974ba049d6f888b21178be20a962"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54143.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.18.0"},{"fixed":"6.1.53"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.4.16"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.5.0"},{"fixed":"6.5.3"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54143.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/451dc187cadd47771e5d9434fe220fad7be84057"},{"type":"WEB","url":"https://git.kernel.org/stable/c/858322c409e0aba8f70810d23f35c482744f007c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b7dbc27301f560c3b915235c53383155b3512083"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cf10b0bb503c974ba049d6f888b21178be20a962"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54143.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54143"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54143.json"}}