Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-40015

media: stm32-csi: Fix dereference before NULL check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: media: stm32-csi: Fix dereference before NULL check In 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while assigning a value to the 'src_pad'. However the same value is being checked against NULL at a later point of time indicating that there are chances that the value can be NULL. Move the dereference after the NULL check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e7bad98c205d17c745de9d83ebf73e53cbf99d48 to < 1f053d82e59c785b2b939cbed12f13657f84b296affected
  • e7bad98c205d17c745de9d83ebf73e53cbf99d48 to < 4eeafff163e80d576c5efc1360ae310c0ceedd02affected
  • e7bad98c205d17c745de9d83ebf73e53cbf99d48 to < 80eaf32672871bd2623ce6ba13ffc1f018756580affected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.16.11 to ≤ 6.16.*unaffected
  • 6.17.1 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References