Description
In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and another program (qv4l2) changes the TV standard from NTSC to PAL, the kernel crashes due to trying to copy to unmapped memory. Changing from NTSC to PAL increases the resolution in the usbtv struct, but the video plane buffer isn't adjusted, so it overflows. [hverkuil: call vb2_is_busy instead of vb2_is_streaming]
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0e0fe3958fdd13dbf55c3a787acafde6efd04272 to < c35e7c7a004ef379a1ae7c7486d4829419acad1daffected0e0fe3958fdd13dbf55c3a787acafde6efd04272 to < ee7bade8b9244834229b12b6e1e724939bedd484affected0e0fe3958fdd13dbf55c3a787acafde6efd04272 to < 5427dda195d6baf23028196fd55a0c90f66ffa61affected0e0fe3958fdd13dbf55c3a787acafde6efd04272 to < ef9b3c22405192afaa279077ddd45a51db90b83daffected0e0fe3958fdd13dbf55c3a787acafde6efd04272 to < 3d83d0b5ae5045a7a246ed116b5f6c688a12f9e9affected0e0fe3958fdd13dbf55c3a787acafde6efd04272 to < c3d75524e10021aa5c223d94da4996640aed46c0affected0e0fe3958fdd13dbf55c3a787acafde6efd04272 to < 9f886d21e235c4bd038cb20f6696084304197ab3affected0e0fe3958fdd13dbf55c3a787acafde6efd04272 to < 7e40e0bb778907b2441bff68d73c3eb6b6cd319faffected
Linux Linux
Default version status: affected
3.14affected0 to < 3.14unaffected5.4.297 to ≤ 5.4.*unaffected5.10.241 to ≤ 5.10.*unaffected5.15.190 to ≤ 5.15.*unaffected6.1.149 to ≤ 6.1.*unaffected6.6.103 to ≤ 6.6.*unaffected6.12.44 to ≤ 6.12.*unaffected6.16.4 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c35e7c7a004ef379a1ae7c7486d4829419acad1d ↗
- https://git.kernel.org/stable/c/ee7bade8b9244834229b12b6e1e724939bedd484 ↗
- https://git.kernel.org/stable/c/5427dda195d6baf23028196fd55a0c90f66ffa61 ↗
- https://git.kernel.org/stable/c/ef9b3c22405192afaa279077ddd45a51db90b83d ↗
- https://git.kernel.org/stable/c/3d83d0b5ae5045a7a246ed116b5f6c688a12f9e9 ↗
- https://git.kernel.org/stable/c/c3d75524e10021aa5c223d94da4996640aed46c0 ↗
- https://git.kernel.org/stable/c/9f886d21e235c4bd038cb20f6696084304197ab3 ↗
- https://git.kernel.org/stable/c/7e40e0bb778907b2441bff68d73c3eb6b6cd319f ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html ↗