Security tracker / CVE-2025-22028

CVE-2025-22028

media: vimc: skip .s_stream() for stopped entities

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in adc589d2a208 ("media: vimc: Add vimc-streamer for stream
 carnil> control"). Vulnerable versions: 4.14.108 4.19.31 5.0.4 5.1.

Bugs

Status

Branch	Status
upstream	released (6.15-rc1) [36cef585e2a31e4ddf33a004b0584a7a572246de]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.11) [6f6064dab4dcfb7e34a395040a0c9dc22cc8765d]
6.12-upstream-stable	released (6.12.23) [845e9286ff99ee88cfdeb2b748f730003a512190]
6.6-upstream-stable	released (6.6.89) [a505075730d23ccc19fc4ac382a0ed73b630c057]
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.12.25-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed