In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regar…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed in case of a failure in the deinit function. Only store the instance pointer when the initialization was successful, to solve this issue. Hardware name: Acer Tomato (rev3 - 4) board (DT) pstate: 804…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/521ce0ea7418298d754494fe53263c23c4c78a8e Patch
- https://git.kernel.org/stable/c/97c75ee5de060d271d80109b0c47cb6008439e5b Patch
- https://git.kernel.org/stable/c/ec25fc3c2c1e8958a51abcfed614f81446d918c4 Patch
- https://git.kernel.org/stable/c/521ce0ea7418298d754494fe53263c23c4c78a8e Patch
- https://git.kernel.org/stable/c/97c75ee5de060d271d80109b0c47cb6008439e5b Patch
- https://git.kernel.org/stable/c/ec25fc3c2c1e8958a51abcfed614f81446d918c4 Patch
Timeline
- nvd_ingest NVD