VDB

CISA-2022-49527

CISA-2022-49527 PUBLISHED CVSS 5.5 MEDIUM

Reported by Linux · Published February 26, 2025

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: avoid null dereference in deinit If venus_probe fails at pm_runtime_put_sync the error handling first calls hfi_destroy and afterwards hfi_core_deinit. As hfi_destroy sets core->ops to NULL, hfi_core_deinit cannot call the core_deinit function anymore. Avoid this null pointer derefence by skipping the call when necessary.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
LinuxLinux09c2845e8fe4fcab942929480203f504a6e0a114, 09c2845e8fe4fcab942929480203f504a6e0a114, 09c2845e8fe4fcab942929480203f504a6e0a114
LinuxLinux4.13, 0, 4.14.283
linuxlinux_kernel4.13, 4.13, 4.13
LinuxLinux09c2845e8fe4fcab942929480203f504a6e0a114, 09c2845e8fe4fcab942929480203f504a6e0a114, 09c2845e8fe4fcab942929480203f504a6e0a114

Timeline

  • Feb 26, 2025 CVE Published
  • Oct 1, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›