CVE-2021-47644

In the Linux kernel, the following vulnerability has been resolved:

media: staging: media: zoran: move videodev alloc

Move some code out of zr36057_init() and create new functions for handling zr->video_dev. This permit to ease code reading and fix a zr->video_dev memory leak.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is restricted to local environments with specific legacy video capture hardware and primarily leads to denial of service through resource exhaustion. The staging Zoran driver is not enabled by default in supported Red Hat Enterprise Linux releases, significantly reducing exposure across standard deployments. Successful exploitation requires an attacker to have local access and the ability to interact with a system containing or emulating the relevant physical capture device.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.