QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-43833

Back to search

CVE-2024-43833

Published: Aug 17, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix NULL pointer dereference in adding ancillary links In v4l2_async_create_ancillary_links(), ancillary links are created for lens and flash sub-devices. These are sub-device to sub-device links and if the async notifier is related to a V4L2 device, the source sub-device of the ancillary link is NULL, leading to a NULL pointer dereference. Check the notifier's sd field is non-NULL in v4l2_async_create_ancillary_links(). [Sakari Ailus: Reword the subject and commit messages slightly.]

VendorProductVersions

Linux

Linux

affected
aa4faf6eb27132532d5a133d9241254c16d4bafa - < fe0f92fd5320b393e44ca210805e653ea90cc982
affected
aa4faf6eb27132532d5a133d9241254c16d4bafa - < 249212ceb4187783af3801c57b92a5a25d410621
affected
aa4faf6eb27132532d5a133d9241254c16d4bafa - < b87e28050d9b0959de24574d587825cfab2f13fb
affected
aa4faf6eb27132532d5a133d9241254c16d4bafa - < 9b4667ea67854f0b116fe22ad11ef5628c5b5b5f

Linux

Linux

affected
5.19
unaffected
0 - < 5.19
unaffected
6.1.103 - <= 6.1.*
unaffected
6.6.44 - <= 6.6.*
unaffected
6.10.3 - <= 6.10.*

+1 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now