CVE-2024-43833

media: v4l: async: Fix NULL pointer dereference in adding ancillary links

published August 17, 2024

CVSS
—
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: v4l: async: Fix NULL pointer dereference in adding ancillary links

In v4l2_async_create_ancillary_links(), ancillary links are created for

lens and flash sub-devices. These are sub-device to sub-device links and

if the async notifier is related to a V4L2 device, the source sub-device

of the ancillary link is NULL, leading to a NULL pointer dereference.

Check the notifier's sd field is non-NULL in

v4l2_async_create_ancillary_links().

[Sakari Ailus: Reword the subject and commit messages slightly.]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Published
2024-08-17T09:21Z
EPSS history
Timeline
  • 17 AUG 09:21Z
    media: v4l: async: Fix NULL pointer dereference in adding ancillary links
    cvelistv5