Description
In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() In cal_ctx_v4l2_init_formats(), devm_kzalloc() is assigned to ctx->active_fmt and there is a dereference of it after that, which could lead to NULL pointer dereference on failure of devm_kzalloc(). Fix this bug by adding a NULL check of ctx->active_fmt. This bug was found by a static analyzer. Builds with 'make allyesconfig' show no new warnings, and our static analyzer no longer warns about this code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7168155002cf7aadbfaa14a28f037c880a214764 to < aa613ac270292e102503e9767882e39200efe608affected7168155002cf7aadbfaa14a28f037c880a214764 to < 91e2805579ab0783eed53acc2bf9fb553e939004affected7168155002cf7aadbfaa14a28f037c880a214764 to < 1381f1a629a090c251965edb56f849ad648414a4affected7168155002cf7aadbfaa14a28f037c880a214764 to < abd77889851d2ead0d0c9c4d29f1808801477b00affected
Linux Linux
Default version status: affected
5.12affected0 to < 5.12unaffected5.15.33 to ≤ 5.15.*unaffected5.16.19 to ≤ 5.16.*unaffected5.17.2 to ≤ 5.17.*unaffected5.18 to ≤ *unaffected