Linux Kernel Vimc Media Driver Stream Handling Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Vimc media driver has been addressed. The issue arose because the driver improperly called the .s_stream() function for sub-devices that were not started or were stopped. This misstep triggered a warning during the streaming process. The vulnerability has been resolved by modifying the stream termination function to ensure that .s_stream() is only called for entities that have been properly initiated.

Impact

The vulnerability could lead to improper handling of media streaming operations, potentially causing warnings or errors during the streaming process.

Reproduction

The vulnerability can be reproduced by using the Vimc media driver in the Linux kernel. When a sub-device is stopped or not started, the driver incorrectly calls the .s_stream() operation, which can lead to warnings being generated. This behavior can be observed by initiating a streaming operation on a sub-device that has not been properly started.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been fixed.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.