CVE-2026-46222
- Source
- https://cve.org/CVERecord?id=CVE-2026-46222
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46222.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-46222
- Downstream
- Related
- Published
- 2026-05-28T09:40:38.777Z
- Modified
- 2026-07-08T08:13:36.352853496Z
- Summary
- media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
The pads missed checks for connected devices which may a null dereference when the stream is enabled.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 pc : rkcifinterfaceenablestreams+0x48/0xf0 lr : rkcifinterfaceenablestreams+0x44/0xf0 Call trace: rkcifinterfaceenablestreams+0x48/0xf0 v4l2subdevenablestreams+0x26c/0x3f0 rkcifstreamstartstreaming+0x140/0x278 vb2startstreaming+0x74/0x188 vb2corestreamon+0xe0/0x1d8 vb2ioctlstreamon+0x60/0xa8 v4lstreamon+0x2c/0x40 _videodoioctl+0x34c/0x400 videousercopy+0x2d0/0x800 videoioctl2+0x20/0x60 v4l2ioctl+0x48/0x78
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46222.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/318142640590342bfec7aa06d0bdcd0ddbf953d0
- https://git.kernel.org/stable/c/8e3c751259dc2d1325838eff26f41032523c7b57
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46222.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-46222
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git