CVE-2025-40207

In the Linux kernel vulnerability CVE-2025-40207, the media: v4l2-subdev path v4l2_subdev_call_state_try() allocates a subdev state with __v4l2_subdev_state_alloc() but does not check for allocation failure, which could return an ERR_PTR and crash v4l2_subdev_call_state_try(). The connected advis...

CVE-2025-40207 media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-subdev: Fix alloc failure check in v4l2subdevcallstatetry v4l2subdevcallstatetry macro allocates a subdev state with v4l2subdevstatealloc, but does not check the returned value. If v4l2subdevstatealloc fails, it retur...

PT-2025-46764

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The v4l2 subdev call state try macro in the Linux kernel does not check the return value of v4l2 subdev state alloc. If v4l2 subdev state alloc fails, it returns an error pointer, which...