CVE-2024-57978

media: imx-jpeg: Fix potential error pointer dereference in detach_pm()

State
Published
Severity
Not scored
Published
Feb 27, 2025
Updated
May 23, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: imx-jpeg: Fix potential error pointer dereference in detach_pm()

The proble is on the first line:

if (jpeg->pd_dev[i] && !pm_runtime_suspended(jpeg->pd_dev[i]))

If jpeg->pd_dev[i] is an error pointer, then passing it to pm_runtime_suspended() will lead to an Oops. The other conditions check for both error pointers and NULL, but it would be more clear to use the IS_ERR_OR_NULL() check for that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f3c4e088ec01cae45931a18ddf7cae0f4d72e1c5 to before a32ba399a030853f2db45a90ba5474fdd3494aadAffected
  • 12914fd765ba4f9d6a9a50439e8dd2e9f91423f2 to before fde89fe11b44500bfcb2d405825b69a5df805d19Affected
  • b7a830bbc25da0f641e3ef2bac3b1766b2777a8b to before 1b2af918bb714937a8be6cb637f528585461cd98Affected
  • 2f86d104539fab9181ea7b5721f40e7b92a8bf67 to before 6e601a64f7777e2f78c02db1a8b5ba3b7c5e9e31Affected
  • fd0af4cd35da0eb550ef682b71cda70a4e36f6b9 to before f0b8535a7885ed4fd0b11625addb5476cae0f845Affected
  • fd0af4cd35da0eb550ef682b71cda70a4e36f6b9 to before 1378ffec30367233152b7dbf4fa6a25ee98585d1Affected
  • 5.15.174 to before 5.15.179Affected
  • 6.1.120 to before 6.1.129Affected
  • 6.6.64 to before 6.6.76Affected
  • 6.12.4 to before 6.12.13Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 5.15.179 through 5.15.*Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.76 through 6.6.*Not affected
  • 6.12.13 through 6.12.*Not affected
  • 6.13.2 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.