In the Linux kernel, the following vulnerability has been resolved:
media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
The pads missed checks for connected devices which may a null dereference when the stream is enabled.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 pc : rkcif_interface_enable_streams+0x48/0xf0 lr : rkcif_interface_enable_streams+0x44/0xf0 Call trace: rkcif_interface_enable_streams+0x48/0xf0 v4l2_subdev_enable_streams+0x26c/0x3f0 rkcif_stream_start_streaming+0x140/0x278 vb2_start_streaming+0x74/0x188 vb2_core_streamon+0xe0/0x1d8 vb2_ioctl_streamon+0x60/0xa8 v4l_streamon+0x2c/0x40 __video_do_ioctl+0x34c/0x400 video_usercopy+0x2d0/0x800 video_ioctl2+0x20/0x60 v4l2_ioctl+0x48/0x78
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-gke-64kUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-oem-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-awsUpgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-azure-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-azureUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-gcpUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-nvidia-bosUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-oem-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-realtime-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-raspi-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-genericUpgrade linux-image-aws-64kUpgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-generic-64k-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-realtimeUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1015-raspi | Jul 20, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub