Description

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning

Fix a smatch static checker warning on vdec_h264_req_multi_if.c.
Which leads to a kernel crash when fb is NULL.

Classification

CVE ID: CVE-2024-47754

Affected Products

Vendor: Linux, Linux

Product: Linux, Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.03% (probability of being exploited)

EPSS Percentile: 5.96% (scored less or equal to compared to others)

EPSS Date: 2025-04-05 (when was this score calculated)

Stakeholder-Specific Vulnerability Categorization (SSVC)

SSVC Exploitation: none

SSVC Technical Impact: partial

SSVC Automatable: false

References

https://nvd.nist.gov/vuln/detail/CVE-2024-47754
https://git.kernel.org/stable/c/d48890ef8765001caff732ac6ec80a3b2e470215
https://git.kernel.org/stable/c/588bcce9e64cc5138858ab562268eb3943c5b06c
https://git.kernel.org/stable/c/47b3b97930913ca74a595cc12bdbb650259afc6e
https://git.kernel.org/stable/c/301f7778263116388c20521a1a641067647ab31c
https://git.kernel.org/stable/c/9be85491619f1953b8a29590ca630be571941ffa

Timeline