Riskcovery

CVE-2026-43297

media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()

rga_get_frame() can return ERR_PTR(-EINVAL) when buffer type is unsupported or invalid. rga_buf_init() does not check the return value and unconditionally dereferences the pointer when accessing f->size.

Add proper ERR_PTR checking and return the error to prevent dereferencing an invalid pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6040702ade234c8212dcfdef85e2f5549aa2f0f5 to before 5da29ade540b51763b950987bd410add7edaf3d1Affected
  • 6040702ade234c8212dcfdef85e2f5549aa2f0f5 to before 1af2853b4e97fd95262fdef311b2334337069bc9Affected
  • 6040702ade234c8212dcfdef85e2f5549aa2f0f5 to before aa22221c5dc695a3d479e1e1b63f0c0e9eb29dbfAffected
  • 6040702ade234c8212dcfdef85e2f5549aa2f0f5 to before 81f8e0e6a2e115df9274d0289779f8fca694479cAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.