CVE-2026-46222
NULL Pointer Dereference in Linux Kernel Rockchip CIF Driver
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| rockchip | rkcif | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's media component for Rockchip devices, specifically in the rkcif driver. The issue is due to missing checks for connected devices on certain pads, which are components involved in media streaming. Because of this missing check, when a stream is enabled, the kernel may attempt to dereference a null pointer, leading to a crash or instability.
How can this vulnerability impact me? :
The vulnerability can cause the Linux kernel to crash or become unstable due to a null pointer dereference when enabling media streams on affected Rockchip devices. This can lead to denial of service conditions where media streaming functionality is disrupted or the entire system may become unresponsive.