CVE-2023-53425: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: media: platform: mediatek: vpu: fix NULL ptr dereference If pdev is NULL, then it is still dereferenced. This fixes this smatch warning: drivers/media/platform/mediatek/vpu/mtk_vpu.c:570 vpu_load_firmware() warn: address of NULL pointer 'pdev'

Affected products

• Linux Linux Kernel: before 4.14.324 (fixed in 4.14.324); from 4.15, before 4.19.293 (fixed in 4.19.293); from 4.20, before 5.4.255 (fixed in 5.4.255); from 5.5, before 5.10.192 (fixed in 5.10.192); from 5.11, before 5.15.128 (fixed in 5.15.128); from 5.16, before 6.1.47 (fixed in 6.1.47); …

Published 2025-09-18. Last modified 2026-06-17.