CVE-2025-40207
kernel: media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · November 12, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
v4l2_subdev_call_state_try() macro allocates a subdev state with __v4l2_subdev_state_alloc(), but does not check the returned value. If __v4l2_subdev_state_alloc fails, it returns an ERR_PTR, and that would cause v4l2_subdev_call_state_try() to crash.
Add proper error handling to v4l2_subdev_call_state_try().
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified