Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() In cal_ctx_v4l2_init_formats(), devm_kzalloc() is assigned to ctx->active_fmt and there is a dereference of it after that, which could lead to NULL pointer dereference on failure of devm_kzalloc(). Fix this bug by adding a NULL check of ctx->active_fmt. This bug was found by a static analyzer. Builds with 'make allyesconfig' show no new warnings, and our static analyzer no longer warns about this code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 7168155002cf7aadbfaa14a28f037c880a214764 before aa613ac270292e102503e9767882e39200efe608; affected 7168155002cf7aadbfaa14a28f037c880a214764 before 91e2805579ab0783eed53acc2bf9fb553e939004; affected 7168155002cf7aadbfaa14a28f037c880a214764 before 1381f1a629a090c251965edb56f849ad648414a4; affected 7168155002cf7aadbfaa14a28f037c880a214764 before abd77889851d2ead0d0c9c4d29f1808801477b00 |
| Linux / Linux | affected 5.12; unaffected 0 before 5.12; unaffected 5.15.33 through 5.15.*; unaffected 5.16.19 through 5.16.*; unaffected 5.17.2 through 5.17.*; unaffected 5.18 through * |
CWE
No CWE identifiers supplied.