Bug 1225014 (CVE-2023-52850) - VUL-0: CVE-2023-52850: kernel: media: hantro: Check whether reset op is defined before use
Summary: VUL-0: CVE-2023-52850: kernel: media: hantro: Check whether reset op is defin...
Status: RESOLVED INVALID
Alias: CVE-2023-52850
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/407130/
Whiteboard: CVSSv3.1:SUSE:CVE-2023-52850:4.4:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-22 14:14 UTC by SMASH SMASH
Modified: 2024-07-08 15:01 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-05-22 14:14:13 UTC 
In the Linux kernel, the following vulnerability has been resolved:

media: hantro: Check whether reset op is defined before use

The i.MX8MM/N/P does not define the .reset op since reset of the VPU is
done by genpd. Check whether the .reset op is defined before calling it
to avoid NULL pointer dereference.

Note that the Fixes tag is set to the commit which removed the reset op
from i.MX8M Hantro G2 implementation, this is because before this commit
all the implementations did define the .reset op.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-52850
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2023/CVE-2023-52850.mbox
https://git.kernel.org/stable/c/64f55cebb4339ae771e9e7f3f42bee2489e2fa00
https://git.kernel.org/stable/c/66b4c5f980d741f3a47e4b65eeaf2797f2d59294
https://git.kernel.org/stable/c/24c06295f28335ced3aad53dd4b0a0bae7b9b100
https://git.kernel.org/stable/c/88d4b23a629ebd34f682f770cb6c2116c851f7b8
https://www.cve.org/CVERecord?id=CVE-2023-52850
Comment 2 Carlos López 2024-05-28 09:54:01 UTC 
Nothing to do, closing.