NetSight
IP …
high7.1

CVE-2025-71136

In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() It's…

Impact

In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() It's possible for cp_read() and hdmi_read() to return -EIO. Those values are further used as indexes for accessing arrays. Fix that by checking return values where it's needed. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.12.1 before 5.10.248
from 5.11 before 5.15.198
from 5.16 before 6.1.160
from 6.2 before 6.6.120
from 6.7 before 6.12.64
from 6.13 before 6.18.4

Weakness classification

CWE-125

References