CVE-2022-49163

In the Linux kernel, the following vulnerability has been resolved:

media: imx-jpeg: fix a bug of accessing array out of bounds

When error occurs in parsing jpeg, the slot isn't acquired yet, it may be the default value MXC_MAX_SLOTS. If the driver access the slot using the incorrect slot number, it will access array out of bounds. The result is the driver will change num_domains, which follows slot_data in struct mxc_jpeg_dev. Then the driver won't detach the pm domain at rmmod, which will lead to kernel panic when trying to insmod again.

This vulnerability poses minimal risk to Red Hat environments because it specifically targets hardware-specific JPEG acceleration drivers for NXP i.MX application processors. Red Hat Enterprise Linux kernels do not enable or ship this architecture-specific media driver in standard deployments. Consequently, enterprise environments running supported Red Hat platforms are not impacted by this flaw.