PT-2026-61087 · Linux · Linux
CVE-2026-53382
·
Publicado
2026-07-19
·
Atualizado
2026-07-19
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: fix NULL pointer dereference in vidtv mux push si
syzbot reported a general protection fault in
vidtv psi ts psi write into [1].
vidtv mux get pid ctx() can return NULL, but vidtv mux push si() does
not check for this before dereferencing the returned pointer to access
the continuity counter. This leads to a general protection fault when
accessing a near-NULL address.
The root cause is that vidtv mux pid ctx init() does not check the
return value of vidtv mux create pid ctx once() for PMT section PIDs.
If the allocation fails, the PID context is never created, but init
returns success. The subsequent vidtv mux push si() call then gets
NULL from vidtv mux get pid ctx() and crashes.
Fix both the root cause (add error check in vidtv mux pid ctx init
for PMT PIDs) and add defensive NULL checks in vidtv mux push si for
all vidtv mux get pid ctx() calls.
[1]
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
Workqueue: events vidtv mux tick
RIP: 0010:vidtv psi ts psi write into+0x54a/0xbc0 drivers/media/test-drivers/vidtv/vidtv psi.c:197
Call Trace:
vidtv psi table header write into drivers/media/test-drivers/vidtv/vidtv psi.c:799 [inline]
vidtv psi pmt write into+0x3b2/0xa70 drivers/media/test-drivers/vidtv/vidtv psi.c:1231
vidtv mux push si+0x932/0xe80 drivers/media/test-drivers/vidtv/vidtv mux.c:196
vidtv mux tick+0xe9b/0x1480 drivers/media/test-drivers/vidtv/vidtv mux.c:408
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux