Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-50383

media: mediatek: vcodec: Can't set dst buffer to done when lat decode error

Description

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Can't set dst buffer to done when lat decode error Core thread will call v4l2_m2m_buf_done to set dst buffer done for lat architecture. If lat call v4l2_m2m_buf_done_and_job_finish to free dst buffer when lat decode error, core thread will access kernel NULL pointer dereference, then crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7b182b8d9c852343fb34923a2d1b4e61421b37c7 to < eeb090420f3477eb5011586709409fc655c2b16caffected
  • 7b182b8d9c852343fb34923a2d1b4e61421b37c7 to < 66d26ed30056e7d2da3e9c14125ffe6049a4f907affected
  • 7b182b8d9c852343fb34923a2d1b4e61421b37c7 to < 3568ecd3f3a6d133ab7feffbba34955c8c79bbc4affected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 6.0.16 to ≤ 6.0.*unaffected
  • 6.1.2 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References