NetSight
IP …
high7.8

CVE-2024-42313

In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdec_close There appears to be a possible use after fre…

Impact

In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdec_close There appears to be a possible use after free with vdec_close(). The firmware will add buffer release work to the work queue through HFI callbacks as a normal part of decoding. Randomly closing the decoder device from userspace during normal decoding can incur a read after free for inst. Fix it by cancelling the work in vdec_close.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.13 before 4.19.320
from 4.20 before 5.4.282
from 5.5 before 5.10.224
from 5.11 before 5.15.165
from 5.16 before 6.1.103
from 6.2 before 6.6.44

Weakness classification

CWE-416

References