In the Linux kernel, the following vulnerability has been resolved:
media: vimc: skip .s_stream() for stopped entities
Syzbot reported [1] a warning prompted by a check in call_s_stream() that checks whether .s_stream() operation is warranted for unstarted or stopped subdevs.
Add a simple fix in vimc_streamer_pipeline_terminate() ensuring that entities skip a call to .s_stream() unless they have been previously properly started.
[1] Syzbot report: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 5933 at drivers/media/v4l2-core/v4l2-subdev.c:460 call_s_stream+0x2df/0x350 drivers/media/v4l2-core/v4l2-subdev.c:460 Modules linked in: CPU: 0 UID: 0 PID: 5933 Comm: syz-executor330 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 ... Call Trace: <TASK> vimc_streamer_pipeline_terminate+0x218/0x320 drivers/media/test-drivers/vimc/vimc-streamer.c:62 vimc_streamer_pipeline_init drivers/media/test-drivers/vimc/vimc-streamer.c:101 [inline] vimc_streamer_s_stream+0x650/0x9a0 drivers/media/test-drivers/vimc/vimc-streamer.c:203 vimc_capture_start_streaming+0xa1/0x130 drivers/media/test-drivers/vimc/vimc-capture.c:256 vb2_start_streaming+0x15f/0x5a0 drivers/media/common/videobuf2/videobuf2-core.c:1789 vb2_core_streamon+0x2a7/0x450 drivers/media/common/videobuf2/videobuf2-core.c:2348 vb2_streamon drivers/media/common/videobuf2/videobuf2-v4l2.c:875 [inline] vb2_ioctl_streamon+0xf4/0x170 drivers/media/common/videobuf2/videobuf2-v4l2.c:1118 __video_do_ioctl+0xaf0/0xf00 drivers/media/v4l2-core/v4l2-ioctl.c:3122 video_usercopy+0x4d2/0x1620 drivers/media/v4l2-core/v4l2-ioctl.c:3463 v4l2_ioctl+0x1ba/0x250 drivers/media/v4l2-core/v4l2-dev.c:366 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl fs/ioctl.c:892 [inline] __x64_sys_ioctl+0x190/0x200 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2b85c01b19 ...
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-obs-build | Dec 5, 2025 | Jun 17, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1041-awsUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-lowlatency-6.11Upgrade linux-image-azure-fde-6.11Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-86-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.11Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-virtualUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fde-edgeUpgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub