CVE-2024-57978

media: imx-jpeg: Fix potential error pointer dereference in detach_pm()

published February 27, 2025

CVSS
—
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: imx-jpeg: Fix potential error pointer dereference in detach_pm()

The proble is on the first line:

if (jpeg->pd_dev[i] && !pm_runtime_suspended(jpeg->pd_dev[i]))

If jpeg->pd_dev[i] is an error pointer, then passing it to

pm_runtime_suspended() will lead to an Oops. The other conditions

check for both error pointers and NULL, but it would be more clear to

use the IS_ERR_OR_NULL() check for that.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.0th percentile
Published
2025-02-27T02:07Z
EPSS history
Timeline
  • 27 FEB 02:07Z
    media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
    cvelistv5