CVE-2025-40207 — Linux vulnerability
33 documents7 sources
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 94.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
v4l2_subdev_call_state_try() macro allocates a subdev state with
__v4l2_subdev_state_alloc(), but does not check the returned value. If
__v4l2_subdev_state_alloc fails, it returns an ERR_PTR, and that would
cause v4l2_subdev_call_state_try() to crash.
Add proper error handling to v4l2_subdev_call_state_try().
Affected Packages7 packages
▶CVEListV5linux/linux982c0487185bd466059ff618f398a8d074ddb654 — 5b0057459cdc243ffb35617603142dcace09c711+5