CVE - CVE-2024-38547

CVE-ID
CVE-2024-38547	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries The allocation failure of mycs->yuv_scaler_binary in load_video_binaries() is followed with a dereference of mycs->yuv_scaler_binary after the following call chain: sh_css_pipe_load_binaries() \|-> load_video_binaries(mycs->yuv_scaler_binary == NULL) \| \|-> sh_css_pipe_unload_binaries() \|-> unload_video_binaries() In unload_video_binaries(), it calls to ia_css_binary_unload with argument &pipe->pipe_settings.video.yuv_scaler_binary[i], which refers to the same memory slot as mycs->yuv_scaler_binary. Thus, a null-pointer dereference is triggered.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/3b621e9e9e148c0928ab109ac3d4b81487469acb URL:https://git.kernel.org/stable/c/3b621e9e9e148c0928ab109ac3d4b81487469acb MISC:https://git.kernel.org/stable/c/4b68b861b514a5c09220d622ac3784c0ebac6c80 URL:https://git.kernel.org/stable/c/4b68b861b514a5c09220d622ac3784c0ebac6c80 MISC:https://git.kernel.org/stable/c/6482c433863b257b0b9b687c28ce80b89d5f89f0 URL:https://git.kernel.org/stable/c/6482c433863b257b0b9b687c28ce80b89d5f89f0 MISC:https://git.kernel.org/stable/c/69b27ff82f87379afeaaea4b2f339032fdd8486e URL:https://git.kernel.org/stable/c/69b27ff82f87379afeaaea4b2f339032fdd8486e MISC:https://git.kernel.org/stable/c/82c2c85aead3ea3cbceef4be077cf459c5df2272 URL:https://git.kernel.org/stable/c/82c2c85aead3ea3cbceef4be077cf459c5df2272 MISC:https://git.kernel.org/stable/c/a1ab99dcc8604afe7e3bccb01b10da03bdd7ea35 URL:https://git.kernel.org/stable/c/a1ab99dcc8604afe7e3bccb01b10da03bdd7ea35 MISC:https://git.kernel.org/stable/c/cc20c87b04db86c8e3e810bcdca686b406206069 URL:https://git.kernel.org/stable/c/cc20c87b04db86c8e3e810bcdca686b406206069
Assigning CNA
kernel.org
Date Record Created
20240618	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240618)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)