CVE-2024-38547: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
In the Linux kernel, the following vulnerability has been resolved:
media: atomisp: sshcss: Fix a null-pointer dereference in loadvideobinaries
The allocation failure of mycs->yuvscalerbinary in loadvideobinaries() is followed with a dereference of mycs->yuvscalerbinary after the following call chain:
shcsspipeloadbinaries() |-> loadvideobinaries(mycs->yuvscalerbinary == NULL) | |-> shcsspipeunloadbinaries() |-> unloadvideobinaries()
In unloadvideobinaries(), it calls to iacssbinaryunload with argument &pipe->pipesettings.video.yuvscalerbinary[i], which refers to the same memory slot as mycs->yuvscalerbinary. Thus, a null-pointer dereference is triggered.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.94-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.8.12-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38547?
CVE-2024-38547 is classified as a high severity vulnerability in the Linux kernel.
How do I fix CVE-2024-38547?
To fix CVE-2024-38547, upgrade your Linux kernel to a version that includes the patches for this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-38547?
CVE-2024-38547 affects Linux kernel versions from 4.12 up to 6.9.3, excluding patched versions.
What type of vulnerability is CVE-2024-38547?
CVE-2024-38547 is a null-pointer dereference vulnerability that may lead to a denial of service.
Is there a public exploit available for CVE-2024-38547?
As of now, there are no known public exploits for CVE-2024-38547, but it is recommended to patch as a precaution.