{"id":"CVE-2024-40973","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-vcodec: potential null pointer deference in SCP\n\nThe return value of devm_kzalloc() needs to be checked to avoid\nNULL pointer deference","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-vcodec: potential null pointer deference in SCP\n\nThe return value of devm_kzalloc() needs to be checked to avoid\nNULL pointer deference. This is similar to C…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel < 6.6.36","linux_kernel >= 6.7, < 6.9.7"],"patched":["linux_kernel 6.9.7"],"published":"2024-07-12","updated":"2026-08-23","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-40973","references":[{"url":"https://git.kernel.org/stable/c/19ef02106c990bf4235365a08b9d8d2fee37272a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3a693c7e243b932faee5c1fb728efa73f0abc39b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/53dbe08504442dc7ba4865c09b3bbf5fe849681b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ac79a923365ae1e524398087cf16313cdbd7a144","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/eeb62bb4ca22db17f7dfe8fb8472e0442df3d92f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f066882293b5ad359e44c4ed24ab1811ffb0b354","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3a693c7e243b932faee5c1fb728efa73f0abc39b","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/53dbe08504442dc7ba4865c09b3bbf5fe849681b","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/f066882293b5ad359e44c4ed24ab1811ffb0b354","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00293,"epssPercentile":0.22051,"ingestedAt":"2026-08-23T13:48:04.425Z","slug":"CVE-2024-40973","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-vcodec: potential null pointer deference in SCP\n\nThe return value of devm_kzalloc() needs to be checked to avoid\nNULL pointer deference. This is similar to CVE-2022-3113.\n\n## Affected\n\n- `linux_kernel < 6.6.36`\n- `linux_kernel >= 6.7, < 6.9.7`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.9.7`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}