CVE-2021-47645

In the Linux kernel, the following vulnerability has been resolved:

media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com

On the case tmp_dcim=1, the index of buffer is miscalculated. This generate a NULL pointer dereference later.

So let's fix the calcul and add a check to prevent this to reappear.

This vulnerability is rated as Moderate impact because successful exploitation is restricted to a local denial of service via a kernel crash, without compromising data confidentiality or system integrity. Triggering this condition requires local access and the presence of specialized Zoran video capture hardware. Furthermore, Red Hat Enterprise Linux does not enable this staging driver in standard production kernels, so default deployments are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.