PT-2025-8765

CVE-2024-57978

·

Published

2024-12-02

·

Updated

2026-01-19

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential error pointer dereference issue has been identified in the Linux kernel, specifically in the imx-jpeg module. The problem arises when the jpeg->pd dev[i] pointer is an error pointer and is passed to the pm runtime suspended() function, leading to a potential Oops. The existing conditions check for both error pointers and NULL, but it is recommended to use the IS ERR OR NULL() check for clarity.
Recommendations For the Linux kernel, consider applying the fix that uses the IS ERR OR NULL() check to prevent potential error pointer dereferences in the detach pm() function.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
AZL-58033
DLA-4102-1
OESA-2025-1339
OESA-2025-1340
OPENSUSE-SU-2025_1177-1
OPENSUSE-SU-2025_1178-1
OPENSUSE-SU-2025_1180-1
SUSE-SU-2025:01919-1
SUSE-SU-2025:1177-1
SUSE-SU-2025_1177-1
SUSE-SU-2025:1178-1
SUSE-SU-2025_1178-1
SUSE-SU-2025:1180-1
SUSE-SU-2025_1180-1
SUSE-SU-2025:20190-1
SUSE-SU-2025:20192-1
SUSE-SU-2025:20260-1
SUSE-SU-2025:20270-1
USN-7510-1
USN-7510-2
USN-7510-3
USN-7510-4
USN-7510-5
USN-7510-6
USN-7510-7
USN-7510-8
USN-7511-1
USN-7511-2
USN-7511-3
USN-7512-1
USN-7521-1
USN-7521-2
USN-7521-3
USN-7593-1
USN-7602-1
Found an issue in the description? Have something to add? Feel free to write us 👾