CVE-2025-37971

staging: bcm2835-camera: Initialise dev in v4l2_dev

published May 20, 2025

CVSS
—
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

staging: bcm2835-camera: Initialise dev in v4l2_dev

Commit 42a2f6664e18 ("staging: vc04_services: Move global g_state to

vchiq_state") changed mmal_init to pass dev->v4l2_dev.dev to

vchiq_mmal_init, however nothing iniitialised dev->v4l2_dev, so we got

a NULL pointer dereference.

Set dev->v4l2_dev.dev during bcm2835_mmal_probe. The device pointer

could be passed into v4l2_device_register to set it, however that also

has other effects that would need additional changes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00187 · 7.9th percentile
Published
2025-05-20T16:47Z
EPSS history
Timeline
  • 20 MAY 16:47Z
    staging: bcm2835-camera: Initialise dev in v4l2_dev
    cvelistv5