media: chips-media: wave5: Fix Reports from Kernel Lock Validator
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.111, 6.18.53
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handle_dynamic_resolution change requires that the state_lock be acquired based on the lockdep_assert_held. However, the handle_dynamic_resolution_change call in initialize_sequence does not properly obtain the lock before calling. Since the v4l2_ctrl_find and s_ctrl can sleep, they should not be called while a lock is already held. Store off the fbc_buf_count then properly update control once lock has been freed.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 9707a6254a8a6b978bde811a44fe07d86c229d1c · fixed in 629a937091ecf9c5c9f7a18f41cb0e6c778a7b2f; From 9707a6254a8a6b978bde811a44fe07d86c229d1c · fixed in 072beef6a19f9c84dc5a50c5499663a5734c1096; From 9707a6254a8a6b978bde811a44fe07d86c229d1c · fixed in 7d5d364f8b2dcc9b6b92456fb55632fde4a4d96f
- Linux Linux
6.8
- KernelLinux
From 6.8.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53