Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-39464
HistoryJun 25, 2024 - 2:25 p.m.

CVE-2024-39464 media: v4l: async: Fix notifier list entry init

2024-06-2514:25:03
Linux
github.com
1
linux kernel
v4l
async
fix
notifier
list entry
vulnerability
uninitialized
pointer dereference

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

media: v4l: async: Fix notifier list entry init

struct v4l2_async_notifier has several list_head members, but only
waiting_list and done_list are initialized. notifier_entry was kept
‘zeroed’ leading to an uninitialized list_head.
This results in a NULL-pointer dereference if csi2_async_register() fails,
e.g. node for remote endpoint is disabled, and returns -ENOTCONN.
The following calls to v4l2_async_nf_unregister() results in a NULL
pointer dereference.
Add the missing list head initializer.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial