CVE-2025-68808

media: vidtv: initialize local pointers upon transfer of memory ownership

published January 13, 2026

CVSS
—
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: initialize local pointers upon transfer of memory ownership

vidtv_channel_si_init() creates a temporary list (program, service, event)

and ownership of the memory itself is transferred to the PAT/SDT/EIT

tables through vidtv_psi_pat_program_assign(),

vidtv_psi_sdt_service_assign(), vidtv_psi_eit_event_assign().

The problem here is that the local pointer where the memory ownership

transfer was completed is not initialized to NULL. This causes the

vidtv_psi_pmt_create_sec_for_each_pat_entry() function to fail, and

in the flow that jumps to free_eit, the memory that was freed by

vidtv_psi_*_table_destroy() can be accessed again by

vidtv_psi_*_event_destroy() due to the uninitialized local pointer, so it

is freed once again.

Therefore, to prevent use-after-free and double-free vulnerability,

local pointers must be initialized to NULL when transferring memory

ownership.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.9th percentile
Published
2026-01-13T15:29Z
EPSS history
Timeline
  • 13 JAN 15:29Z
    media: vidtv: initialize local pointers upon transfer of memory ownership
    cvelistv5