{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2023-53812 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2023-53812 is a vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2023-53812 and fix it if it is affected.\n\nWhat it is: CVE-2023-53812 is a vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2023-53812 in the wild and no public exploit code.\n\nAffected product: Linux. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2023-53812/ (Markdown: https://insights.sbomify.com/CVE-2023-53812/index.md)","id":"CVE-2023-53812","markdown":"https://insights.sbomify.com/CVE-2023-53812/index.md","name":"CVE-2023-53812","record":{"aliases":["BELL-CVE-2023-53812","DEBIAN-CVE-2023-53812","GHSA-2h3c-fqw7-c4jj","UBUNTU-CVE-2023-53812"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Linux kernel","requires_auth":"none","summary":"A null pointer dereference in the MediaTek video codec driver causes a kernel crash during device probe, leading to denial of service.","user_interaction":"not_required","vuln_class":"null_dereference"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mediatek: vcodec: fix decoder disable pm crash\n\nCan't call pm_runtime_disable when the architecture support sub device for\n'dev-\u003epm.dev' is NUll, or will get below crash log.\n\n[   10.771551] pc : _raw_spin_lock_irq+0x4c/0xa0\n[   10.771556] lr : __pm_runtime_disable+0x30/0x130\n[   10.771558] sp : ffffffc01e4cb800\n[   10.771559] x29: ffffffc01e4cb800 x28: ffffffdf082108a8\n[   10.771563] x27: ffffffc01e4cbd70 x26: ffffff8605df55f0\n[   10.771567] x25: 0000000000000002 x24: 0000000000000002\n[   10.771570] x23: ffffff85c0dc9c00 x22: 0000000000000001\n[   10.771573] x21: 0000000000000001 x20: 0000000000000000\n[   10.771577] x19: 00000000000000f4 x18: ffffffdf2e9fbe18\n[   10.771580] x17: 0000000000000000 x16: ffffffdf2df13c74\n[   10.771583] x15: 00000000000002ea x14: 0000000000000058\n[   10.771587] x13: ffffffdf2de1b62c x12: ffffffdf2e9e30e4\n[   10.771590] x11: 0000000000000000 x10: 0000000000000001\n[   10.771593] x9 : 0000000000000000 x8 : 00000000000000f4\n[   10.771596] x7 : 6bff6264632c6264 x6 : 0000000000008000\n[   10.771600] x5 : 0080000000000000 x4 : 0000000000000001\n[   10.771603] x3 : 0000000000000008 x2 : 0000000000000001\n[   10.771608] x1 : 0000000000000000 x0 : 00000000000000f4\n[   10.771613] Call trace:\n[   10.771617]  _raw_spin_lock_irq+0x4c/0xa0\n[   10.771620]  __pm_runtime_disable+0x30/0x130\n[   10.771657]  mtk_vcodec_probe+0x69c/0x728 [mtk_vcodec_dec 800cc929d6631f79f9b273254c8db94d0d3500dc]\n[   10.771662]  platform_drv_probe+0x9c/0xbc\n[   10.771665]  really_probe+0x13c/0x3a0\n[   10.771668]  driver_probe_device+0x84/0xc0\n[   10.771671]  device_driver_attach+0x54/0x78","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"media: mediatek: vcodec: fix decoder disable pm crash","id":"CVE-2023-53812","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"null_dereference","year":"2023"},"n_packages":0,"n_references":4,"next":{"headline":"ext4: fix rbtree traversal bug in ext4_mb_use_preallocated","id":"CVE-2023-53813"},"packages":[],"prev":{"headline":"RDMA/irdma: Cap MSIX used to online CPUs + 1","id":"CVE-2023-53811"},"products":["Linux"],"published":"2025-12-09","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-05-11","vendors":["Linux"]},"summary":"A null pointer dereference in the MediaTek video codec driver causes a kernel crash during device probe, leading to denial of service.","url":"https://insights.sbomify.com/CVE-2023-53812/"}