U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2022-49254

Change History

New CVE Received from kernel.org 2/26/2025 2:01:02 AM

Action Type Old Value New Value
Added Description

								
							
							
						
In the Linux kernel, the following vulnerability has been resolved:

media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()

In cal_ctx_v4l2_init_formats(), devm_kzalloc() is assigned to
ctx->active_fmt and there is a dereference of it after that, which could
lead to NULL pointer dereference on failure of devm_kzalloc().

Fix this bug by adding a NULL check of ctx->active_fmt.

This bug was found by a static analyzer.

Builds with 'make allyesconfig' show no new warnings, and our static
analyzer no longer warns about this code.
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/1381f1a629a090c251965edb56f849ad648414a4
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/91e2805579ab0783eed53acc2bf9fb553e939004
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/aa613ac270292e102503e9767882e39200efe608
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/abd77889851d2ead0d0c9c4d29f1808801477b00