In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: fix list_del corruption If ti_csi2rx_start_dma() fails in ti_csi2rx_dma_callback(), the buffer is marked…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: fix list_del corruption If ti_csi2rx_start_dma() fails in ti_csi2rx_dma_callback(), the buffer is marked done with VB2_BUF_STATE_ERROR but is not removed from the DMA queue. This causes the same buffer to be retried in the next iteration, resulting in a double list_del() and eventual list corruption. Fix this by removing the buffer from the queue before calling vb2_buffer_done() on error. This resol…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/68e5579f4de12207b23c41b44a4c0778b6c2858f Patch
- https://git.kernel.org/stable/c/92d0188f36ca8082af7989d743eb5b44c2d259f7 Patch
- https://git.kernel.org/stable/c/a4a8cb0889927d59ebd839458c8f038bc5298ef9 Patch
- https://git.kernel.org/stable/c/ae42c6fe531425ef2f47e82f96851427d24bbf6b Patch
Timeline
- nvd_ingest NVD