CVE-2025-38225

media: imx-jpeg: Cleanup after an allocation error

MEDIUM

5.5

CVSS Score

Published: July 4, 2025 at 01:37 PM UTC

Updated: June 17, 2026 at 09:16 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Cleanup after an allocation error When allocation failures are not cleaned up by the driver, further allocation errors will be false-positives, which will cause buffers to remain uninitialized and cause NULL pointer dereferences. Ensure proper cleanup of failed allocations to prevent these issues.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

5.13 ≤ v < 6.1.1435.13 ≤ v < 6.12.355.13 ≤ v < 6.15.45.13 ≤ v < 6.165.13 ≤ v < 6.6.956.13 ≤ v < 6.15.46.2 ≤ v < 6.6.956.7 ≤ v < 6.12.352db16c6ed72ce644d5639b3ed15e5817442db4ba5.13

Vendor states this is fixed in 0ee9469f818a0b4de3c0e7aecd733c103820d181 (fixed)

Vendor states this is fixed in 6d0efe7d35c75394f32ff9d0650a007642d23857 (fixed)

Vendor states this is fixed in 7500bb9cf164edbb2c8117d57620227b1a4a8369 (fixed)

Vendor states this is fixed in b89ff9cf37ff59399f850d5f7781ef78fc37679f (fixed)

Vendor states this is fixed in ec26be7d6355a05552a0d0c1e73031f83aa4dc7f (fixed)

Vendor states this is fixed in 5.13 (unaffected)

Vendor states this is fixed in 6.1.143 (unaffected)

Vendor states this is fixed in 6.12.35 (unaffected)

Vendor states this is fixed in 6.15.4 (unaffected)

Vendor states this is fixed in 6.16 (unaffected)

Vendor states this is fixed in 6.6.95 (unaffected)