CVE-2021-47645

media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: Aug 11, 2026
Reserved: Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com

On the case tmp_dcim=1, the index of buffer is miscalculated. This generate a NULL pointer dereference later.

So let's fix the calcul and add a check to prevent this to reappear.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before 8dce4b265a5357731058f69645840dabc718c687Affected 83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before bafec1a6ba4b187a7fcdcfce0faebdc623d4ef8eAffected 83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before 7e76f3ed7ab2ae026c6ef9cc23096a7554af8c52Affected 83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before 20db2ed1e2f9fcd417fa67853e5154f0c2537d6cAffected 83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before 20811bbe685ca3eddd34b0c750860427d7030910Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.2 to before 5.10Not affected 5.10.110 through 5.10.Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.Not affected

Product

Versions

LinuxLinux

83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before 8dce4b265a5357731058f69645840dabc718c687Affected
83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before bafec1a6ba4b187a7fcdcfce0faebdc623d4ef8eAffected
83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before 7e76f3ed7ab2ae026c6ef9cc23096a7554af8c52Affected
83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before 20db2ed1e2f9fcd417fa67853e5154f0c2537d6cAffected
83f89a8bcbc3c520a889b5fc7c4b95669d712f65 to before 20811bbe685ca3eddd34b0c750860427d7030910Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.2 to before 5.10Not affected
5.10.110 through 5.10.*Not affected
5.15.33 through 5.15.*Not affected
5.16.19 through 5.16.*Not affected
5.17.2 through 5.17.*Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.