Executive Summary

This vulnerability exists in the Linux kernel's media component for Renesas vsp1. It occurs when unloading the module on generation 4 hardware, causing a NULL pointer dereference. The issue arises because the cleanup code incorrectly calls the function vsp1_drm_cleanup() instead of the correct function vsp1_vspx_cleanup(). The fix involves checking the IP version and calling the appropriate cleanup function accordingly, similar to how the initialization code operates.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can cause a NULL pointer dereference during module unload, which may lead to a kernel crash or system instability. This can result in denial of service or unexpected behavior on affected systems using the Renesas vsp1 media driver on generation 4 hardware.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability is caused by a NULL pointer dereference when unloading the renesas vsp1 module on gen 4 devices due to incorrect cleanup function calls.

To mitigate this vulnerability, update the Linux kernel to a version where this issue is fixed. The fix involves checking the IP version and calling the appropriate cleanup function (vsp1_drm_cleanup() or vsp1_vspx_cleanup()) accordingly.

Until the update is applied, avoid unloading the renesas vsp1 module on affected systems to prevent triggering the NULL pointer dereference.

Useful 0 Not Useful 0