Riskcovery

CVE-2025-38044

media: cx231xx: set device_caps for 417

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: cx231xx: set device_caps for 417

The video_device for the MPEG encoder did not set device_caps.

Add this, otherwise the video device can't be registered (you get a WARN_ON instead).

Not seen before since currently 417 support is disabled, but I found this while experimenting with it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd to before 2ad41beb7df3bd63b209842d16765ec59dafe6e4Affected
  • 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd to before 0884dd3abbe80307a2d4cbdbe5e312be164f8adbAffected
  • 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd to before c91447e35b9bea60bda4408c48e7891d14351021Affected
  • 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd to before 9d1a5be86dbe074bd8dd6bdd63a99d6bb66d5930Affected
  • 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd to before 5c9eca180a4235abd56cc7f7308ca72128d93dceAffected
  • 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd to before 4731d5328f507ae8fd8a57abbca9119ec7a8d665Affected
  • 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd to before e43fd82bb2110bf9d13d800cdc49cceddfd0ede5Affected
  • 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd to before a79efc44b51432490538a55b9753a721f7d3ea42Affected
LinuxLinux
  • 5.3Affected
  • before 5.3Not affected
  • 5.4.294 through 5.4.*Not affected
  • 5.10.238 through 5.10.*Not affected
  • 5.15.185 through 5.15.*Not affected
  • 6.1.141 through 6.1.*Not affected
  • 6.6.93 through 6.6.*Not affected
  • 6.12.31 through 6.12.*Not affected
  • 6.14.9 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.