CVE-2025-38044: media: cx231xx: set device_caps for 417
In the Linux kernel, the following vulnerability has been resolved:
media: cx231xx: set devicecaps for 417
The videodevice for the MPEG encoder did not set devicecaps.
Add this, otherwise the video device can't be registered (you get a WARNON instead).
Not seen before since currently 417 support is disabled, but I found this while experimenting with it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.96.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38044?
The vulnerability CVE-2025-38044 is considered a medium severity issue due to the impact on device registration.
How do I fix CVE-2025-38044?
To fix CVE-2025-38044, ensure that the video_device for the MPEG encoder properly sets device_caps in the Linux kernel.
What are the implications of CVE-2025-38044?
The implications of CVE-2025-38044 include failure to register the video device, leading to potential functionality issues.
Which software is affected by CVE-2025-38044?
CVE-2025-38044 affects the Linux Kernel used in systems with media capabilities including the cx231xx driver.
Is CVE-2025-38044 a new vulnerability?
CVE-2025-38044 is a newly acknowledged vulnerability that relates to device capabilities not being set correctly in the Linux kernel.