CVE-2023-53748

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup

variable *nplanes is provided by user via system call argument. The possible value of q_data->fmt->num_planes is 1-3, while the value of *nplanes can be 1-8. The array access by index i can cause array out-of-bounds.

Fix this bug by checking *nplanes against the array size.

This flaw carries no security impact for Red Hat Enterprise Linux because the affected MediaTek video codec platform driver is not built or enabled in supported enterprise kernels. The vulnerability is restricted to hardware configurations utilizing specialized MediaTek video decoders that process user-controlled buffer parameters. Standard Red Hat distributions do not ship or support this driver, leaving default installations unexposed.