Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52647

media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access When translating source to sink streams in the crossbar subdev, the driver tries to locate the remote subdev connected to the sink pad. The remote pad may be NULL, if userspace tries to enable a stream that ends at an unconnected crossbar sink. When that occurs, the driver dereferences the NULL pad, leading to a crash. Prevent the crash by checking if the pad is NULL before using it, and return an error if it is.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cf21f328fcafacf4f96e7a30ef9dceede1076378 to < c95318607fbe8fdd44991a8dad2e44118e6b8812affected
  • cf21f328fcafacf4f96e7a30ef9dceede1076378 to < c4bd29bf5b7f67925bc1abd16069f22dadf5f061affected
  • cf21f328fcafacf4f96e7a30ef9dceede1076378 to < 91c8ce42fcde09f1da24acab9013b3e19cb88a4eaffected
  • cf21f328fcafacf4f96e7a30ef9dceede1076378 to < eb2f932100288dbb881eadfed02e1459c6b9504caffected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.24 to ≤ 6.6.*unaffected
  • 6.7.12 to ≤ 6.7.*unaffected
  • 6.8.3 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References