PT-2026-61087 · Linux · Linux
CVE-2026-53382
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: fix NULL pointer dereference in vidtv mux push si
syzbot reported a general protection fault in
vidtv psi ts psi write into [1].
vidtv mux get pid ctx() can return NULL, but vidtv mux push si() does
not check for this before dereferencing the returned pointer to access
the continuity counter. This leads to a general protection fault when
accessing a near-NULL address.
The root cause is that vidtv mux pid ctx init() does not check the
return value of vidtv mux create pid ctx once() for PMT section PIDs.
If the allocation fails, the PID context is never created, but init
returns success. The subsequent vidtv mux push si() call then gets
NULL from vidtv mux get pid ctx() and crashes.
Fix both the root cause (add error check in vidtv mux pid ctx init
for PMT PIDs) and add defensive NULL checks in vidtv mux push si for
all vidtv mux get pid ctx() calls.
[1]
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
Workqueue: events vidtv mux tick
RIP: 0010:vidtv psi ts psi write into+0x54a/0xbc0 drivers/media/test-drivers/vidtv/vidtv psi.c:197
Call Trace:
vidtv psi table header write into drivers/media/test-drivers/vidtv/vidtv psi.c:799 [inline]
vidtv psi pmt write into+0x3b2/0xa70 drivers/media/test-drivers/vidtv/vidtv psi.c:1231
vidtv mux push si+0x932/0xe80 drivers/media/test-drivers/vidtv/vidtv mux.c:196
vidtv mux tick+0xe9b/0x1480 drivers/media/test-drivers/vidtv/vidtv mux.c:408
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux