In the Linux kernel, the following vulnerability has been resolved:
media: camss: Clean up received buffers on failed start of streaming
It is required to return the received buffers, if streaming can not be started. For instance mediapipelinestart() may fail with EPIPE, if a link validation between entities is not passed, and in such a case a user gets a kernel warning:
WARNING: CPU: 1 PID: 520 at drivers/media/common/videobuf2/videobuf2-core.c:1592 vb2startstreaming+0xec/0x160 <snip> Call trace: vb2startstreaming+0xec/0x160 vb2corestreamon+0x9c/0x1a0 vb2ioctlstreamon+0x68/0xbc v4lstreamon+0x30/0x3c _videodoioctl+0x184/0x3e0 videousercopy+0x37c/0x7b0 videoioctl2+0x24/0x40 v4l2_ioctl+0x4c/0x70
The fix is to correct the error path in videostartstreaming() of camss.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50757.json",
"cna_assigner": "Linux"
}