github - ghsa-6p9h-cfcv-pc5f

ghsa-6p9h-cfcv-pc5f

Vulnerability from github

Published

2025-09-18 15:30

Modified

2025-09-18 15:30

Details

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Can't set dst buffer to done when lat decode error

Core thread will call v4l2_m2m_buf_done to set dst buffer done for lat architecture. If lat call v4l2_m2m_buf_done_and_job_finish to free dst buffer when lat decode error, core thread will access kernel NULL pointer dereference, then crash.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-50383"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-09-18T14:15:37Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mediatek: vcodec: Can\u0027t set dst buffer to done when lat decode error\n\nCore thread will call v4l2_m2m_buf_done to set dst buffer done for\nlat architecture. If lat call v4l2_m2m_buf_done_and_job_finish to\nfree dst buffer when lat decode error, core thread will access kernel\nNULL pointer dereference, then crash.",
  "id": "GHSA-6p9h-cfcv-pc5f",
  "modified": "2025-09-18T15:30:32Z",
  "published": "2025-09-18T15:30:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50383"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3568ecd3f3a6d133ab7feffbba34955c8c79bbc4"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/66d26ed30056e7d2da3e9c14125ffe6049a4f907"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/eeb090420f3477eb5011586709409fc655c2b16c"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2022-50383 (GCVE-0-2022-50383)

Vulnerability from cvelistv5

Published

2025-09-18 13:33

Modified

2025-09-29 10:47

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Can't set dst buffer to done when lat decode error Core thread will call v4l2_m2m_buf_done to set dst buffer done for lat architecture. If lat call v4l2_m2m_buf_done_and_job_finish to free dst buffer when lat decode error, core thread will access kernel NULL pointer dereference, then crash.

References

URL

Tags

	https://git.kernel.org/stable/c/eeb090420f3477eb5011586709409fc655c2b16c
	https://git.kernel.org/stable/c/66d26ed30056e7d2da3e9c14125ffe6049a4f907
	https://git.kernel.org/stable/c/3568ecd3f3a6d133ab7feffbba34955c8c79bbc4

Impacted products

Vendor

Product

Version

Version: 8cdc3794b2e34b3ee11ddfccf4af3f64344a1a75
Version: 8cdc3794b2e34b3ee11ddfccf4af3f64344a1a75
Version: 8cdc3794b2e34b3ee11ddfccf4af3f64344a1a75

Version: 5.16

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/platform/mediatek/vcodec/mtk_vcodec_dec_stateless.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "eeb090420f3477eb5011586709409fc655c2b16c",
              "status": "affected",
              "version": "8cdc3794b2e34b3ee11ddfccf4af3f64344a1a75",
              "versionType": "git"
            },
            {
              "lessThan": "66d26ed30056e7d2da3e9c14125ffe6049a4f907",
              "status": "affected",
              "version": "8cdc3794b2e34b3ee11ddfccf4af3f64344a1a75",
              "versionType": "git"
            },
            {
              "lessThan": "3568ecd3f3a6d133ab7feffbba34955c8c79bbc4",
              "status": "affected",
              "version": "8cdc3794b2e34b3ee11ddfccf4af3f64344a1a75",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/platform/mediatek/vcodec/mtk_vcodec_dec_stateless.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.16"
            },
            {
              "lessThan": "5.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.16",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.2",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mediatek: vcodec: Can\u0027t set dst buffer to done when lat decode error\n\nCore thread will call v4l2_m2m_buf_done to set dst buffer done for\nlat architecture. If lat call v4l2_m2m_buf_done_and_job_finish to\nfree dst buffer when lat decode error, core thread will access kernel\nNULL pointer dereference, then crash."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-29T10:47:30.957Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/eeb090420f3477eb5011586709409fc655c2b16c"
        },
        {
          "url": "https://git.kernel.org/stable/c/66d26ed30056e7d2da3e9c14125ffe6049a4f907"
        },
        {
          "url": "https://git.kernel.org/stable/c/3568ecd3f3a6d133ab7feffbba34955c8c79bbc4"
        }
      ],
      "title": "media: mediatek: vcodec: Can\u0027t set dst buffer to done when lat decode error",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50383",
    "datePublished": "2025-09-18T13:33:04.969Z",
    "dateReserved": "2025-09-17T14:53:06.996Z",
    "dateUpdated": "2025-09-29T10:47:30.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.