CVE-2025-40207

Nov. 14, 2025, 4:42 p.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() v4l2_subdev_call_state_try() macro allocates a subdev state with __v4l2_subdev_state_alloc(), but does not check the returned value. If __v4l2_subdev_state_alloc fails, it returns an ERR_PTR, and that would cause v4l2_subdev_call_state_try() to crash. Add proper error handling to v4l2_subdev_call_state_try().

Product(s) Impacted

Product Versions
kernel
  • *

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/5b0057459cdc243ffb35617603142dcace09c711
https://git.kernel.org/stable/c/94e6336dc1f06a06f5b4cd04d4a012bba34f2857
https://git.kernel.org/stable/c/a553530b3314a0bdc98cf114cdbe204551a70a00
https://git.kernel.org/stable/c/ed30811fbed40751deb952bde534aa2632dc0bf7
https://git.kernel.org/stable/c/f37df9a0eb5e43fcfe02cbaef076123dc0d79c7e

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2025-11-12
CVE-2025-40207

Timeline

Published: Nov. 12, 2025, 10:15 p.m.
Last Modified: Nov. 14, 2025, 4:42 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.