CVE-2024-35919 media: mediatek: vcodec: adding lock to protect encoder context list

2024-05-1910:10:31

Linux

raw.githubusercontent.com

linux kernel

vulnerability

resolved

mediatek

vcodec

lock

encoder context

null pointer

vpu_enc_ipi_handler

scp ip block

unexpected behavior

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: adding lock to protect encoder context list

Add a lock for the ctx_list, to avoid accessing a NULL pointer
within the ‘vpu_enc_ipi_handler’ function when the ctx_list has
been deleted due to an unexpected behavior on the SCP IP block.