CVE-2025-37971

MEDIUM EPSS 4.3%
Published May 20, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 20, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2_dev Commit 42a2f6664e18 ("staging: vc04_services: Move global g_state to vchiq_state") changed mmal_init to pass dev->v4l2_dev.dev to vchiq_mmal_init, however nothing iniitialised dev->v4l2_dev, so we got a NULL pointer dereference. Set dev->v4l2_dev.dev during bcm2835_mmal_probe. The device pointer could be passed into v4l2_device_register to set it, however that also has other effects that would need additional changes.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
4.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥6.10  –  <6.12.29
linuxlinux_kernel*≥6.13  –  <6.14.7
linuxlinux_kernel6.15any
linuxlinux_kernel6.15any
linuxlinux_kernel6.15any
linuxlinux_kernel6.15any
linuxlinux_kernel6.15any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/06753f49336ab161ea0e249a0720125b81b7b31b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/98698ca0e58734bc5c1c24e5bbc7429f981cd186
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b70bdd4923e8b8edbacde2af83ca337bb7005261
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/06753f49336ab161ea0e249a0720125b81b7b31b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/98698ca0e58734bc5c1c24e5bbc7429f981cd186
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b70bdd4923e8b8edbacde2af83ca337bb7005261
    Patch