Null Pointer Dereference Vulnerability in Linux Kernel Media Driver

CVE-2022-50359

What is CVE-2022-50359?

A null pointer dereference vulnerability exists in the Linux kernel's media subsystem, specifically within the cx88 driver. When the cx88_risc_buffer() function is invoked to prepare a buffer, it may fail, leading to an empty buffer initialization. Subsequent operations may then result in dereferencing a null pointer when trying to access this buffer, potentially causing the system to experience a general protection fault. This vulnerability highlights the importance of proper error handling in buffer management within device drivers.

References