CVE-2024-39464

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-39464
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39464.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-39464
Downstream
Related
Published
2024-06-25T14:25:03.578Z
Modified
2026-03-14T12:34:43.423220Z
Summary
media: v4l: async: Fix notifier list entry init
Details

In the Linux kernel, the following vulnerability has been resolved:

media: v4l: async: Fix notifier list entry init

struct v4l2asyncnotifier has several listhead members, but only waitinglist and donelist are initialized. notifierentry was kept 'zeroed' leading to an uninitialized listhead. This results in a NULL-pointer dereference if csi2asyncregister() fails, e.g. node for remote endpoint is disabled, and returns -ENOTCONN. The following calls to v4l2asyncnfunregister() results in a NULL pointer dereference. Add the missing list head initializer.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39464.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b8ec754ae4c563f6aab8c0cb47aeb2eae67f1da3
Fixed
a80d1da923f671c1e6a14e8417cd2f117b27a442
Fixed
44f6d619c30f0c65fcdd2b6eba70fdb4460d87ad
Fixed
6d8acd02c4c6a8f917eefac1de2e035521ca119d

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39464.json"