Description
In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com On the case tmp_dcim=1, the index of buffer is miscalculated. This generate a NULL pointer dereference later. So let's fix the calcul and add a check to prevent this to reappear.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to < 8dce4b265a5357731058f69645840dabc718c687affected83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to < bafec1a6ba4b187a7fcdcfce0faebdc623d4ef8eaffected83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to < 7e76f3ed7ab2ae026c6ef9cc23096a7554af8c52affected83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to < 20db2ed1e2f9fcd417fa67853e5154f0c2537d6caffected83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to < 20811bbe685ca3eddd34b0c750860427d7030910affected
Linux Linux
Default version status: affected
5.10affected0 to < 5.10unaffected5.2 to < 5.10unaffected5.10.110 to ≤ 5.10.*unaffected5.15.33 to ≤ 5.15.*unaffected5.16.19 to ≤ 5.16.*unaffected5.17.2 to ≤ 5.17.*unaffected
References
- https://git.kernel.org/stable/c/8dce4b265a5357731058f69645840dabc718c687 ↗
- https://git.kernel.org/stable/c/bafec1a6ba4b187a7fcdcfce0faebdc623d4ef8e ↗
- https://git.kernel.org/stable/c/7e76f3ed7ab2ae026c6ef9cc23096a7554af8c52 ↗
- https://git.kernel.org/stable/c/20db2ed1e2f9fcd417fa67853e5154f0c2537d6c ↗
- https://git.kernel.org/stable/c/20811bbe685ca3eddd34b0c750860427d7030910 ↗