What’s Vulnerable › Vulnerabilities

CVE-2024-42303: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-17 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() devm_regmap_init_mmio() can fail, add a check and bail out in case of error.

Affected products

• Linux kernel: from 6.3 before 6.6.44; from 6.7 before 6.10.3 — fixed in 6.10.3, 6.6.44

How to fix

Upgrade to a fixed version: Linux kernel 6.10.3, 6.6.44. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/358bc85269d6a359fea597ef9fbb429cd3626e08
• https://git.kernel.org/stable/c/57e9ce68ae98551da9c161aaab12b41fe8601856
• https://git.kernel.org/stable/c/5ab6ac4e9e165b0fe8a326308218337007224f05

Get alerted when CVE-2024-42303 or the next vulnerability affects your stack