In the Linux kernel, the following vulnerability has been resolved:
media: mtk-jpeg: Fix null-ptr-deref during unload module
The workqueue should be destroyed in mtk_jpeg_core.c since commit 09aea13ecf6f ("media: mtk-jpeg: refactor some variables"), otherwise the below calltrace can be easily triggered.
[ 677.862514] Unable to handle kernel paging request at virtual address dfff800000000023 [ 677.863633] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] ... [ 677.879654] CPU: 6 PID: 1071 Comm: modprobe Tainted: G O 6.8.12-mtk+gfa1a78e5d24b+ #17 ... [ 677.882838] pc : destroy_workqueue+0x3c/0x770 [ 677.883413] lr : mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw] [ 677.884314] sp : ffff80008ad974f0 [ 677.884744] x29: ffff80008ad974f0 x28: ffff0000d7115580 x27: ffff0000dd691070 [ 677.885669] x26: ffff0000dd691408 x25: ffff8000844af3e0 x24: ffff80008ad97690 [ 677.886592] x23: ffff0000e051d400 x22: ffff0000dd691010 x21: dfff800000000000 [ 677.887515] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800085397ac0 [ 677.888438] x17: 0000000000000000 x16: ffff8000801b87c8 x15: 1ffff000115b2e10 [ 677.889361] x14: 00000000f1f1f1f1 x13: 0000000000000000 x12: ffff7000115b2e4d [ 677.890285] x11: 1ffff000115b2e4c x10: ffff7000115b2e4c x9 : ffff80000aa43e90 [ 677.891208] x8 : 00008fffeea4d1b4 x7 : ffff80008ad97267 x6 : 0000000000000001 [ 677.892131] x5 : ffff80008ad97260 x4 : ffff7000115b2e4d x3 : 0000000000000000 [ 677.893054] x2 : 0000000000000023 x1 : dfff800000000000 x0 : 0000000000000118 [ 677.893977] Call trace: [ 677.894297] destroy_workqueue+0x3c/0x770 [ 677.894826] mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw] [ 677.895677] devm_action_release+0x50/0x90 [ 677.896211] release_nodes+0xe8/0x170 [ 677.896688] devres_release_all+0xf8/0x178 [ 677.897219] device_unbind_cleanup+0x24/0x170 [ 677.897785] device_release_driver_internal+0x35c/0x480 [ 677.898461] device_release_driver+0x20/0x38 ... [ 677.912665] ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency | Mar 28, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub