CVE-2026-53382

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si

syzbot reported a general protection fault in

vidtv_psi_ts_psi_write_into [1].

vidtv_mux_get_pid_ctx() can return NULL, but vidtv_mux_push_si() does

not check for this before dereferencing the returned pointer to access

the continuity counter. This leads to a general protection fault when

accessing a near-NULL address.

The root cause is that vidtv_mux_pid_ctx_init() does not check the

return value of vidtv_mux_create_pid_ctx_once() for PMT section PIDs.

If the allocation fails, the PID context is never created, but init

returns success. The subsequent vidtv_mux_push_si() call then gets

NULL from vidtv_mux_get_pid_ctx() and crashes.

Fix both the root cause (add error check in vidtv_mux_pid_ctx_init

for PMT PIDs) and add defensive NULL checks in vidtv_mux_push_si for

all vidtv_mux_get_pid_ctx() calls.

[1]

Oops: general protection fault, probably for no

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References