In the Linux kernel, the following vulnerability has been resolved:
media: cx231xx: set device_caps for 417
The videodevice for the MPEG encoder did not set devicecaps.
Add this, otherwise the video device can't be registered (you get a WARN_ON instead).
Not seen before since currently 417 support is disabled, but I found this while experimenting with it.
[
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"272458640077603813021428430451973798999",
"95836364635867045610336918002198180731",
"13918146476869638978397128050018861457",
"273812179235745877457464586482463913078"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a79efc44b51432490538a55b9753a721f7d3ea42",
"target": {
"file": "drivers/media/usb/cx231xx/cx231xx-417.c"
},
"id": "CVE-2025-38044-1242bff3"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"272458640077603813021428430451973798999",
"95836364635867045610336918002198180731",
"13918146476869638978397128050018861457",
"273812179235745877457464586482463913078"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ad41beb7df3bd63b209842d16765ec59dafe6e4",
"target": {
"file": "drivers/media/usb/cx231xx/cx231xx-417.c"
},
"id": "CVE-2025-38044-2cf080dc"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"272458640077603813021428430451973798999",
"95836364635867045610336918002198180731",
"13918146476869638978397128050018861457",
"273812179235745877457464586482463913078"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9d1a5be86dbe074bd8dd6bdd63a99d6bb66d5930",
"target": {
"file": "drivers/media/usb/cx231xx/cx231xx-417.c"
},
"id": "CVE-2025-38044-51e00e00"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"272458640077603813021428430451973798999",
"95836364635867045610336918002198180731",
"13918146476869638978397128050018861457",
"273812179235745877457464586482463913078"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4731d5328f507ae8fd8a57abbca9119ec7a8d665",
"target": {
"file": "drivers/media/usb/cx231xx/cx231xx-417.c"
},
"id": "CVE-2025-38044-8d2f79c8"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"272458640077603813021428430451973798999",
"95836364635867045610336918002198180731",
"13918146476869638978397128050018861457",
"273812179235745877457464586482463913078"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e43fd82bb2110bf9d13d800cdc49cceddfd0ede5",
"target": {
"file": "drivers/media/usb/cx231xx/cx231xx-417.c"
},
"id": "CVE-2025-38044-b4d2e76b"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"272458640077603813021428430451973798999",
"95836364635867045610336918002198180731",
"13918146476869638978397128050018861457",
"273812179235745877457464586482463913078"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0884dd3abbe80307a2d4cbdbe5e312be164f8adb",
"target": {
"file": "drivers/media/usb/cx231xx/cx231xx-417.c"
},
"id": "CVE-2025-38044-f346a607"
}
]