CVE-2024-38547

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null-pointer dereference in the load video binaries() function of the ssh css component in the Linux kernel. This occurs after the allocation failure of mycs->yuv scaler binary and is followed by a dereference of mycs->yuv scaler binary through a specific call chain involving sh css pipe load binaries(), load video binaries(), sh css pipe unload binaries(), and unload video binaries(). The vulnerability can be exploited to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.