QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-49254

Back to search

CVE-2022-49254

Published: Feb 26, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() In cal_ctx_v4l2_init_formats(), devm_kzalloc() is assigned to ctx->active_fmt and there is a dereference of it after that, which could lead to NULL pointer dereference on failure of devm_kzalloc(). Fix this bug by adding a NULL check of ctx->active_fmt. This bug was found by a static analyzer. Builds with 'make allyesconfig' show no new warnings, and our static analyzer no longer warns about this code.

VendorProductVersions

Linux

Linux

affected
7168155002cf7aadbfaa14a28f037c880a214764 - < aa613ac270292e102503e9767882e39200efe608
affected
7168155002cf7aadbfaa14a28f037c880a214764 - < 91e2805579ab0783eed53acc2bf9fb553e939004
affected
7168155002cf7aadbfaa14a28f037c880a214764 - < 1381f1a629a090c251965edb56f849ad648414a4
affected
7168155002cf7aadbfaa14a28f037c880a214764 - < abd77889851d2ead0d0c9c4d29f1808801477b00

Linux

Linux

affected
5.12
unaffected
0 - < 5.12
unaffected
5.15.33 - <= 5.15.*
unaffected
5.16.19 - <= 5.16.*
unaffected
5.17.2 - <= 5.17.*

+1 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now