CVE-2024-56578

media: imx-jpeg: Set video drvdata before register video device

State: Published
Severity: 5.5 Medium
Published: Dec 27, 2024
Updated: May 11, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: imx-jpeg: Set video drvdata before register video device

The video drvdata should be set before the video device is registered, otherwise video_drvdata() may return NULL in the open() file ops, and led to oops.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	2db16c6ed72ce644d5639b3ed15e5817442db4ba to before f68bb1210fbea252552d97242757f69a219e942bAffected 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before b88556e82dc18cb708744d062770853a2d5095b2Affected 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 68efeff2f7fccdfedc55f92e92be32997127d16eAffected 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 5ade59d28eade49194eb09765afdeb0ba717c39aAffected 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before d2b7ecc26bd5406d5ba927be1748aa99c568696cAffected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.12.4 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

2db16c6ed72ce644d5639b3ed15e5817442db4ba to before f68bb1210fbea252552d97242757f69a219e942bAffected
2db16c6ed72ce644d5639b3ed15e5817442db4ba to before b88556e82dc18cb708744d062770853a2d5095b2Affected
2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 68efeff2f7fccdfedc55f92e92be32997127d16eAffected
2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 5ade59d28eade49194eb09765afdeb0ba717c39aAffected
2db16c6ed72ce644d5639b3ed15e5817442db4ba to before d2b7ecc26bd5406d5ba927be1748aa99c568696cAffected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.12.4 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.