Riskcovery

CVE-2022-49163

media: imx-jpeg: fix a bug of accessing array out of bounds

State
Published
Severity
7.1 High
Published
Feb 26, 2025
Updated
Aug 5, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: imx-jpeg: fix a bug of accessing array out of bounds

When error occurs in parsing jpeg, the slot isn't acquired yet, it may be the default value MXC_MAX_SLOTS. If the driver access the slot using the incorrect slot number, it will access array out of bounds. The result is the driver will change num_domains, which follows slot_data in struct mxc_jpeg_dev. Then the driver won't detach the pm domain at rmmod, which will lead to kernel panic when trying to insmod again.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 02f9f97d54ffc85b50ad77f5b1f3c8f69cd17747Affected
  • 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 20c8b90430c5d6c4a3936eaa7c35aac670581487Affected
  • 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before e209e6db2e527db6a93b14c2deedf969caca78fcAffected
  • 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 97558d170a1236280407e8d29a7d095d2c2ed554Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.