Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-43833
HistoryAug 17, 2024 - 9:21 a.m.

CVE-2024-43833 media: v4l: async: Fix NULL pointer dereference in adding ancillary links

2024-08-1709:21:50
Linux
github.com
1
linux kernel
vulnerability
v4l
async
null pointer
ancillary links

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

media: v4l: async: Fix NULL pointer dereference in adding ancillary links

In v4l2_async_create_ancillary_links(), ancillary links are created for
lens and flash sub-devices. These are sub-device to sub-device links and
if the async notifier is related to a V4L2 device, the source sub-device
of the ancillary link is NULL, leading to a NULL pointer dereference.
Check the notifier’s sd field is non-NULL in
v4l2_async_create_ancillary_links().

[Sakari Ailus: Reword the subject and commit messages slightly.]

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial