In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
syzbot report a null-ptr-deref in vidtv_mux_stop_thread. [1]
If dvb->mux is not initialized successfully by vidtv_mux_init() in the vidtv_start_streaming(), it will trigger null pointer dereference about mux in vidtv_mux_stop_thread().
Adjust the timing of streaming initialization and check it before stopping it.
[1] KASAN: null-ptr-deref in range [0x0000000000000128-0x000000000000012f] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor248 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:vidtv_mux_stop_thread+0x26/0x80 drivers/media/test-drivers/vidtv/vidtv_mux.c:471 Code: 90 90 90 90 66 0f 1f 00 55 53 48 89 fb e8 82 2e c8 f9 48 8d bb 28 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 02 7e 3b 0f b6 ab 28 01 00 00 31 ff 89 ee e8 RSP: 0018:ffffc90003f2faa8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87cfb125 RDX: 0000000000000025 RSI: ffffffff87d120ce RDI: 0000000000000128 RBP: ffff888029b8d220 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000003 R12: ffff888029b8d188 R13: ffffffff8f590aa0 R14: ffffc9000581c5c8 R15: ffff888029a17710 FS: 00007f7eef5156c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7eef5e635c CR3: 0000000076ca6000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> vidtv_stop_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:209 [inline] vidtv_stop_feed+0x151/0x250 drivers/media/test-drivers/vidtv/vidtv_bridge.c:252 dmx_section_feed_stop_filtering+0x90/0x160 drivers/media/dvb-core/dvb_demux.c:1000 dvb_dmxdev_feed_stop.isra.0+0x1ee/0x270 drivers/media/dvb-core/dmxdev.c:486 dvb_dmxdev_filter_stop+0x22a/0x3a0 drivers/media/dvb-core/dmxdev.c:559 dvb_dmxdev_filter_free drivers/media/dvb-core/dmxdev.c:840 [inline] dvb_demux_release+0x92/0x550 drivers/media/dvb-core/dmxdev.c:1246 __fput+0x3f8/0xb60 fs/file_table.c:450 task_work_run+0x14e/0x250 kernel/task_work.c:239 get_signal+0x1d3/0x2610 kernel/signal.c:2790 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-generic-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-awsUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-140-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-fipsUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspiUpgrade linux-image-5.15.0-142-generic-lpae | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub