Linux Kernel NULL Pointer Dereference Vulnerability in TI-VPE Media Component

A NULL pointer dereference vulnerability has been identified in the Linux kernel's TI-VPE media component. The issue arises in the function 'cal_ctx_v4l2_init_formats()', where 'devm_kzalloc()' is used to allocate memory for 'ctx->active_fmt'. If this allocation fails, the subsequent dereference can lead to a NULL pointer dereference. The vulnerability has been addressed by adding a NULL check for 'ctx->active_fmt'. This issue was discovered through static analysis, and affected builds no longer exhibit warnings related to this code.

Impact

Exploitation of this vulnerability can lead to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.