In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common<\/p>\n
When VIDIOC_TRY_FMT is called with an unsupported pixel format on the
\nOUTPUT queue, vdec_try_fmt_common() falls back to V4L2_PIX_FMT_MPEG2.
\nHowever, if a distro has locally patched MPEG2 support out (as it has
\nbeen broken for some time) the platform format table does not contain
\nMPEG2 so find_format() returns NULL and the subsequent dereference of
\nfmt_out->max_width triggers a NULL pointer dereference.<\/p>\n
Fix this by falling back to the first format in the platform’s format
\narray instead of hardcoding V4L2_PIX_FMT_MPEG2. This is always valid
\nsince every platform defines at least one format.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common<\/p>\n
When VIDIOC_TRY_FMT is called with an unsupported pixel format o<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-28500","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/28500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}