Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43297

media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()

Description

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() rga_get_frame() can return ERR_PTR(-EINVAL) when buffer type is unsupported or invalid. rga_buf_init() does not check the return value and unconditionally dereferences the pointer when accessing f->size. Add proper ERR_PTR checking and return the error to prevent dereferencing an invalid pointer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6040702ade234c8212dcfdef85e2f5549aa2f0f5 to < 5da29ade540b51763b950987bd410add7edaf3d1affected
  • 6040702ade234c8212dcfdef85e2f5549aa2f0f5 to < 1af2853b4e97fd95262fdef311b2334337069bc9affected
  • 6040702ade234c8212dcfdef85e2f5549aa2f0f5 to < aa22221c5dc695a3d479e1e1b63f0c0e9eb29dbfaffected
  • 6040702ade234c8212dcfdef85e2f5549aa2f0f5 to < 81f8e0e6a2e115df9274d0289779f8fca694479caffected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.75 to ≤ 6.12.*unaffected
  • 6.18.16 to ≤ 6.18.*unaffected
  • 6.19.6 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References