Description
In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Cleanup after an allocation error When allocation failures are not cleaned up by the driver, further allocation errors will be false-positives, which will cause buffers to remain uninitialized and cause NULL pointer dereferences. Ensure proper cleanup of failed allocations to prevent these issues.
References (6)
Scores
CVSS v3
5.5
EPSS
0.0010
EPSS Percentile
27.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-908
Status
published
Products (6)
debian/debian_linux
11.0
linux/Kernel
5.13.0 - 6.1.143linux
linux/Kernel
6.13.0 - 6.15.4linux
linux/Kernel
6.2.0 - 6.6.95linux
linux/Kernel
6.7.0 - 6.12.35linux
linux/linux_kernel
5.13 - 6.1.143
Published
Jul 04, 2025
Tracked Since
Feb 18, 2026