1. Home
  2. Vulnerabilities
  3. CVE-2023-54103
0.0
NA
CVE-2023-54103
media: mtk-jpeg: Fix use after free bug due to uncanceled work
Description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

INFO

Published Date :

Dec. 24, 2025, 1:16 p.m.

Last Modified :

Dec. 30, 2025, 2:15 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2023-54103 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
: Total Affected Vendor : 1 | Products : 1
Solution
Fix use-after-free by canceling work before cleanup.
  • Cancel work items before module cleanup.
  • Ensure all work is completed before freeing resources.
  • Apply kernel patches to address UAF bugs.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2023-54103 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2023-54103 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Dec. 30, 2025

    Action Type Old Value New Value
  • CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Dec. 30, 2025

    Action Type Old Value New Value
    Changed Description In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after free bug due to uncanceled work In mtk_jpeg_probe, &jpeg->job_timeout_work is bound with mtk_jpeg_job_timeout_work. Then mtk_jpeg_dec_device_run and mtk_jpeg_enc_device_run may be called to start the work. If we remove the module which will call mtk_jpeg_remove to make cleanup, there may be a unfinished work. The possible sequence is as follows, which will cause a typical UAF bug. Fix it by canceling the work before cleanup in the mtk_jpeg_remove CPU0 CPU1 |mtk_jpeg_job_timeout_work mtk_jpeg_remove | v4l2_m2m_release | kfree(m2m_dev); | | | v4l2_m2m_get_curr_priv | m2m_dev->curr_ctx //use Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
    Removed Reference kernel.org: https://git.kernel.org/stable/c/2fc20f8bcc2b4d31c808a5320506c31aa2cf3834
    Removed Reference kernel.org: https://git.kernel.org/stable/c/715c0200b4809396998e562ce5cd0284e7314cc1
    Removed Reference kernel.org: https://git.kernel.org/stable/c/8977d9924843823f46696d7d9432ea4b2499ed14
    Removed Reference kernel.org: https://git.kernel.org/stable/c/c677d7ae83141d390d1253abebafa49c962afb52
    Removed Reference kernel.org: https://git.kernel.org/stable/c/d346a2ef6b1ebb77d740890cfaf8478c5b286380
    Removed Reference kernel.org: https://git.kernel.org/stable/c/d56dbfe750a8f96789cc86a911864f663e63bc5d
  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Dec. 24, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after free bug due to uncanceled work In mtk_jpeg_probe, &jpeg->job_timeout_work is bound with mtk_jpeg_job_timeout_work. Then mtk_jpeg_dec_device_run and mtk_jpeg_enc_device_run may be called to start the work. If we remove the module which will call mtk_jpeg_remove to make cleanup, there may be a unfinished work. The possible sequence is as follows, which will cause a typical UAF bug. Fix it by canceling the work before cleanup in the mtk_jpeg_remove CPU0 CPU1 |mtk_jpeg_job_timeout_work mtk_jpeg_remove | v4l2_m2m_release | kfree(m2m_dev); | | | v4l2_m2m_get_curr_priv | m2m_dev->curr_ctx //use
    Added Reference https://git.kernel.org/stable/c/2fc20f8bcc2b4d31c808a5320506c31aa2cf3834
    Added Reference https://git.kernel.org/stable/c/715c0200b4809396998e562ce5cd0284e7314cc1
    Added Reference https://git.kernel.org/stable/c/8977d9924843823f46696d7d9432ea4b2499ed14
    Added Reference https://git.kernel.org/stable/c/c677d7ae83141d390d1253abebafa49c962afb52
    Added Reference https://git.kernel.org/stable/c/d346a2ef6b1ebb77d740890cfaf8478c5b286380
    Added Reference https://git.kernel.org/stable/c/d56dbfe750a8f96789cc86a911864f663e63bc5d
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.