NULL Pointer Dereference Vulnerability in Linux Kernel Rockchip Media Interface

CVE-2026-46222

What is CVE-2026-46222?

A vulnerability in the Linux kernel's Rockchip media interface can lead to a NULL pointer dereference when the stream is activated. This occurs due to the absence of necessary checks for connected devices, which could allow an attacker to exploit this flaw, resulting in potential system crashes or unpredictable behavior. The vulnerability is found in the rkcif_interface_enable_streams function, which does not adequately ensure that required device pads are connected before initiating the stream.

References