media: mali-c55: Fix possible ERR_PTR in enable_streams (Linux Linux)

CVE-2026-68224
Not available

At a glance

Source
NVD
EPSS
EPSS 0.20 % · percentile 10 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Received

Description

In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERR_PTR in enable_streams The media_pad_remote_pad_unique() function returns either a valid pointer or an ERR_PTR() on failure (-ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found). The return value was assigned directly to isp->remote_src and dereferenced in the next line without checking for errors, which could lead to an ERR_PTR dereference. Add proper error checking with IS_ERR() before dereferencing the pointer. Also set isp->remote_src to NULL on error to maintain consistency with other error paths in the function.

References

European references

CERT-FR advisories

Affected products

ProductVersions
Linux · Linuxaffected d5f281f3dd2988998daf45f591920c6013a620d8 < 65d4424275845e9f9012b40b5cbff4572771d768 ; affected d5f281f3dd2988998daf45f591920c6013a620d8 < 94c6402e423d36a2bd6f62055a65a0d439d84da7
Linux · Linuxaffected 6.19 ; unaffected 0 < 6.19 ; unaffected 7.1.6 ≤ 7.1.* ; unaffected 7.2 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD