CVE-2025-40207

media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()

State: Published
Severity: Not scored
Published: Nov 12, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()

v4l2_subdev_call_state_try() macro allocates a subdev state with __v4l2_subdev_state_alloc(), but does not check the returned value. If __v4l2_subdev_state_alloc fails, it returns an ERR_PTR, and that would cause v4l2_subdev_call_state_try() to crash.

Add proper error handling to v4l2_subdev_call_state_try().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	982c0487185bd466059ff618f398a8d074ddb654 to before 5b0057459cdc243ffb35617603142dcace09c711Affected 982c0487185bd466059ff618f398a8d074ddb654 to before ed30811fbed40751deb952bde534aa2632dc0bf7Affected 982c0487185bd466059ff618f398a8d074ddb654 to before 94e6336dc1f06a06f5b4cd04d4a012bba34f2857Affected 982c0487185bd466059ff618f398a8d074ddb654 to before a553530b3314a0bdc98cf114cdbe204551a70a00Affected 982c0487185bd466059ff618f398a8d074ddb654 to before f37df9a0eb5e43fcfe02cbaef076123dc0d79c7eAffected
LinuxLinux	6.0Affected before 6.0Not affected 6.1.157 through 6.1.Not affected 6.6.113 through 6.6.Not affected 6.12.54 through 6.12.Not affected 6.17.4 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

982c0487185bd466059ff618f398a8d074ddb654 to before 5b0057459cdc243ffb35617603142dcace09c711Affected
982c0487185bd466059ff618f398a8d074ddb654 to before ed30811fbed40751deb952bde534aa2632dc0bf7Affected
982c0487185bd466059ff618f398a8d074ddb654 to before 94e6336dc1f06a06f5b4cd04d4a012bba34f2857Affected
982c0487185bd466059ff618f398a8d074ddb654 to before a553530b3314a0bdc98cf114cdbe204551a70a00Affected
982c0487185bd466059ff618f398a8d074ddb654 to before f37df9a0eb5e43fcfe02cbaef076123dc0d79c7eAffected

LinuxLinux

6.0Affected
before 6.0Not affected
6.1.157 through 6.1.*Not affected
6.6.113 through 6.6.*Not affected
6.12.54 through 6.12.*Not affected
6.17.4 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.