CVE-2024-58082: media: nuvoton: Fix an error check in npcm_video_ece_init()
Published Mar 6, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
media: nuvoton: Fix an error check in npcmvideoeceinit()
When function offinddevicebynode() fails, it returns NULL instead of an error code. So the corresponding error check logic should be modified to check whether the return value is NULL and set the error code to be returned as -ENODEV.
Affected Software
6 affected componentsFixes available
Linux Kernel
Linux Linux kernel>=6.7<6.12.14
Linux Linux kernel>=6.13<6.13.3
debian/linux<6.12.15-1
6.12.15-1
debian/linux<6.12.15-1
6.12.15-1
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.15-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Mar 6, 2025
CVE Published
via MITRE·04:13 PM
Data Sourced
via MITRE·04:13 PM
Description
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via OSV·05:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Is CVE-2024-58082 exploitable in production environments?
Yes, CVE-2024-58082 could potentially be exploited in production environments if the vulnerable kernel version is in use.