CVE-2023-54103
Unknown Unknown - Not Provided

Use-After-Free Vulnerability in Linux mtk-jpeg Media Driver

Publication date: 2025-12-24

Last updated on: 2025-12-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after free bug due to uncanceled work In mtk_jpeg_probe, &jpeg->job_timeout_work is bound with mtk_jpeg_job_timeout_work. Then mtk_jpeg_dec_device_run and mtk_jpeg_enc_device_run may be called to start the work. If we remove the module which will call mtk_jpeg_remove to make cleanup, there may be a unfinished work. The possible sequence is as follows, which will cause a typical UAF bug. Fix it by canceling the work before cleanup in the mtk_jpeg_remove CPU0 CPU1 |mtk_jpeg_job_timeout_work mtk_jpeg_remove | v4l2_m2m_release | kfree(m2m_dev); | | | v4l2_m2m_get_curr_priv | m2m_dev->curr_ctx //use

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-24
Last Modified
2025-12-24
Generated
2026-07-06
AI Q&A
2025-12-24
EPSS Evaluated
2025-12-30
NVD
CVE-2023-54103

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Impact Analysis

The use-after-free vulnerability can lead to undefined behavior such as system crashes, memory corruption, or potentially allow an attacker to execute arbitrary code with kernel privileges. This can compromise system stability and security.

Executive Summary

This vulnerability is a use-after-free (UAF) bug in the Linux kernel's media component, specifically in the mtk-jpeg driver. It occurs because a scheduled work item (mtk_jpeg_job_timeout_work) may still be running or pending when the module is removed and cleaned up (via mtk_jpeg_remove). If the work is not canceled before cleanup, the system may attempt to access freed memory, leading to a use-after-free condition.

Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version that includes the fix for the use after free bug in the mtk-jpeg driver. The fix involves canceling the job timeout work before cleanup in the mtk_jpeg_remove function, preventing unfinished work from causing a use after free condition.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-54103. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart