Home

Description

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() rga_get_frame() can return ERR_PTR(-EINVAL) when buffer type is unsupported or invalid. rga_buf_init() does not check the return value and unconditionally dereferences the pointer when accessing f->size. Add proper ERR_PTR checking and return the error to prevent dereferencing an invalid pointer.

PUBLISHED Reserved 2026-05-01 | Published 2026-05-08 | Updated 2026-05-08 | Assigner Linux

Product status

Default status
unaffected

6040702ade234c8212dcfdef85e2f5549aa2f0f5 (git) before 5da29ade540b51763b950987bd410add7edaf3d1
affected

6040702ade234c8212dcfdef85e2f5549aa2f0f5 (git) before 1af2853b4e97fd95262fdef311b2334337069bc9
affected

6040702ade234c8212dcfdef85e2f5549aa2f0f5 (git) before aa22221c5dc695a3d479e1e1b63f0c0e9eb29dbf
affected

6040702ade234c8212dcfdef85e2f5549aa2f0f5 (git) before 81f8e0e6a2e115df9274d0289779f8fca694479c
affected

Default status
affected

6.8
affected

Any version before 6.8
unaffected

6.12.75 (semver)
unaffected

6.18.16 (semver)
unaffected

6.19.6 (semver)
unaffected

7.0 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/5da29ade540b51763b950987bd410add7edaf3d1

git.kernel.org/...c/1af2853b4e97fd95262fdef311b2334337069bc9

git.kernel.org/...c/aa22221c5dc695a3d479e1e1b63f0c0e9eb29dbf

git.kernel.org/...c/81f8e0e6a2e115df9274d0289779f8fca694479c

cve.org (CVE-2026-43297)

nvd.nist.gov (CVE-2026-43297)

Download JSON