Medium · published September 17, 2025
In the Linux kernel, the following vulnerability has been resolved:
media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings
When ipu_bridge_parse_rotation() and ipu_bridge_parse_orientation() run
sensor->adev is not set yet.
So if either of the dev_warn() calls about unknown values are hit this
will lead to a NULL pointer deref.
Set sensor->adev earlier, with a borrowed ref to avoid making unrolling
on errors harder, to fix this.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.16, < 6.4.16 | 6.4.16 |
| linux/linux_kernel | ≥ 6.5, < 6.5.3 | 6.5.3 |