What’s Vulnerable › Vulnerabilities

CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-21 · updated 2026-10-30
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning Fix a smatch static checker warning on vdec_h264_req_if.c. Which leads to a kernel crash when fb is NULL.

Affected products

• Linux kernel: from 5.16 before 6.6.54; from 6.7 before 6.10.13; from 6.11 before 6.11.2 — fixed in 6.6.54, 6.10.13, 6.11.2
• Linux: 5.16 — fixed in 6.12

How to fix

Upgrade to a fixed version: Linux kernel 6.6.54, 6.10.13, 6.11.2; Linux 6.12. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/18181b0c1c5bd43846e5e0ae3d61a4a1adceab03
• https://git.kernel.org/stable/c/207268a03149e134ce60f63dd79a9fbb0ac95e69
• https://git.kernel.org/stable/c/7878d3a385efab560dce793b595447867fb163f2
• https://git.kernel.org/stable/c/790d1848fac5ac3b1c474f66162598ab07a20c21
• https://git.kernel.org/stable/c/c6b9f971b43980de8893610f606d751131fb5d86

Get alerted when CVE-2024-47752 or the next vulnerability affects your stack