CVE-2023-53425 | Linux Kernel up to 6.4.11 media mtk_vpu.c vpu_load_firmware null pointer dereference

September 18, 2025 Yanac

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.4.11. This affects the function vpu_load_firmware of the file drivers/media/platform/mediatek/vpu/mtk_vpu.c of the component media. Such manipulation leads to null pointer dereference.

This vulnerability is referenced as CVE-2023-53425. The attack needs to be initiated within the local network. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More