Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-53336

media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings

Description

In the Linux kernel, the following vulnerability has been resolved: media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings When ipu_bridge_parse_rotation() and ipu_bridge_parse_orientation() run sensor->adev is not set yet. So if either of the dev_warn() calls about unknown values are hit this will lead to a NULL pointer deref. Set sensor->adev earlier, with a borrowed ref to avoid making unrolling on errors harder, to fix this.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 485aa3df0dffa62d347ea4e0116f549338accc59 to < bca783c943cefea97c27f02fdd16bf414e8057dfaffected
  • 485aa3df0dffa62d347ea4e0116f549338accc59 to < 3de35e29cfddfe6bff762b15bcfe8d80bebac6cbaffected
  • 485aa3df0dffa62d347ea4e0116f549338accc59 to < e08b091e33ecf6e4cb2c0c5820a69abe7673280baffected
  • 485aa3df0dffa62d347ea4e0116f549338accc59 to < 284be5693163343e1cf17c03917eecd1d6681bcfaffected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.4.16 to ≤ 6.4.*unaffected
  • 6.5.3 to ≤ 6.5.*unaffected
  • 6.6 to ≤ *unaffected

References