In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2dev Commit 42a2f6664e18 ("staging: vc04services: Move global gstate to vchiqstate") changed mmalinit to pass dev->v4l2dev.dev to vchiqmmalinit, however nothing iniitialised dev->v4l2dev, so we got a NULL pointer dereference. Set dev->v4l2dev.dev during bcm2835mmalprobe. The device pointer could be passed into v4l2deviceregister to set it, however that also has other effects that would need additional changes.