CVE-2024-57978 — media: imx-jpeg: Fix potential error pointer dereference in detach_pm()

Description

In the Linux kernel, the following vulnerability has been resolved:

media: imx-jpeg: Fix potential error pointer dereference in detach_pm()

The proble is on the first line:

if (jpeg->pd_dev[i] && !pm_runtime_suspended(jpeg->pd_dev[i]))

If jpeg->pd_dev[i] is an error pointer, then passing it to
pm_runtime_suspended() will lead to an Oops. The other conditions
check for both error pointers and NULL, but it would be more clear to
use the IS_ERR_OR_NULL() check for that.

Affected products

Vendor	Product	Affected	Fixed
Linux	Linux	5.15.174 – < 5.15.179, 6.1.120 – < 6.1.129, 6.6.64 – < 6.6.76, 6.12.4 – < 6.12.13, 6.13	5.15.179

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	6.12.13-1	—
Debian 13	linux	6.12.13-1	—
Debian 12	linux	6.1.129-1	—
Debian 11	linux-6.1	6.1.129-1~deb11u1	DLA-4102-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu Nvidia-BlueField 22.04 LTS	linux-bluefield	5.15.0-1066.68	—
Ubuntu 24.04 LTS	linux-gcp-6.11 +1	6.11.0-1015.15~24.04.1	USN-7521-1
Ubuntu 24.04 LTS	linux-hwe-6.11	6.11.0-26.26~24.04.1	USN-7521-1
Ubuntu 24.04 LTS	linux-lowlatency-hwe-6.11	6.11.0-1014.15~24.04.1	USN-7521-3
Ubuntu 24.04 LTS	linux-nvidia-6.11	6.11.0-1010.10	—
Ubuntu 24.04 LTS	linux-oem-6.11	6.11.0-1022.22	USN-7521-1
Ubuntu 24.04 LTS	linux-raspi-realtime	No fix yet	—
Ubuntu 22.04 LTS	linux +1	5.15.0-140.150	USN-7510-1
Ubuntu 22.04 LTS	linux-aws	5.15.0-1084.91	USN-7510-7
Ubuntu 22.04 LTS	linux-azure	5.15.0-1089.98	USN-7510-3
Ubuntu 22.04 LTS	linux-azure-fde	5.15.0-1089.98.1	—
Ubuntu 22.04 LTS	linux-gcp	5.15.0-1083.92	USN-7511-1
Ubuntu 22.04 LTS	linux-gke +1	5.15.0-1081.87	USN-7511-3, USN-7510-1
Ubuntu 22.04 LTS	linux-gkeop	5.15.0-1066.74	USN-7510-1
Ubuntu 22.04 LTS	linux-ibm	5.15.0-1076.79	USN-7510-1
Ubuntu 22.04 LTS	linux-intel-iotg	5.15.0-1079.85	USN-7510-1
Ubuntu 22.04 LTS	linux-kvm	5.15.0-1080.85	USN-7510-1
Ubuntu 22.04 LTS	linux-nvidia	5.15.0-1078.79	USN-7510-1
Ubuntu 22.04 LTS	linux-nvidia-tegra	5.15.0-1037.37	USN-7510-3
Ubuntu 22.04 LTS	linux-nvidia-tegra-igx	5.15.0-1026.26	USN-7510-7
Ubuntu 22.04 LTS	linux-raspi	5.15.0-1078.81	USN-7510-7
Ubuntu 22.04 LTS	linux-riscv +32	No fix yet	—
Ubuntu 22.04 LTS	linux-xilinx-zynqmp	5.15.0-1050.54	USN-7602-1
Ubuntu 20.04 LTS	linux-aws-5.15	5.15.0-1084.91~20.04.1	USN-7510-8
Ubuntu 20.04 LTS	linux-azure-5.15	5.15.0-1089.98~20.04.1	USN-7510-3
Ubuntu 20.04 LTS	linux-gcp-5.15	5.15.0-1083.92~20.04.1	USN-7512-1
Ubuntu 20.04 LTS	linux-gke +28	No fix yet	—
Ubuntu 20.04 LTS	linux-ibm-5.15	5.15.0-1076.79~20.04.1	USN-7510-1
Ubuntu 20.04 LTS	linux-intel-iotg-5.15	5.15.0-1079.85~20.04.1	USN-7510-7
Ubuntu 20.04 LTS	linux-lowlatency-hwe-5.15	5.15.0-140.150~20.04.1	USN-7510-1
Ubuntu 20.04 LTS	linux-oracle-5.15	5.15.0-1081.87~20.04.1	USN-7510-1
Ubuntu 20.04 LTS	linux-riscv-5.15	5.15.0-1079.83~20.04.1	—
Ubuntu 18.04 LTS	linux-gcp +14	No fix yet	—

Show 4 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	linux-hwe-edge	No fix yet	—
Ubuntu Pro Realtime 22.04 LTS	linux-intel-iot-realtime	5.15.0-1077.79	USN-7510-4
Ubuntu Pro Realtime 22.04 LTS	linux-realtime	5.15.0-1084.93	USN-7510-4
Ubuntu Pro FIPS-updates 22.04 LTS	linux-aws-fips	5.15.0-1084.91+fips1	USN-7510-6
Ubuntu Pro FIPS-updates 22.04 LTS	linux-azure-fips	5.15.0-1089.98+fips1	USN-7510-5
Ubuntu Pro FIPS-updates 22.04 LTS	linux-fips	5.15.0-140.150+fips1	USN-7510-2
Ubuntu Pro FIPS-updates 22.04 LTS	linux-gcp-fips	5.15.0-1083.92+fips1	USN-7511-2
Ubuntu Pro 20.04 LTS	linux-hwe-5.15	5.15.0-142.152~20.04.1	USN-7593-1

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP6	kernel-64kb +3	6.4.0-150600.23.47.2	SUSE-SU-2025:1180-1
SLES 15 SP6	kernel-azure +1	6.4.0-150600.8.34.2	SUSE-SU-2025:1177-1
SLES 15 SP6	kernel-coco +3	6.4.0-15061.21.coco15sp6.1	SUSE-SU-2025:01919-1
SLES 15 SP6	kernel-default-base	6.4.0-150600.23.47.2.150600.12.20.2	SUSE-SU-2025:1180-1
SLES 15 SP6	kernel-docs +2	6.4.0-150600.23.47.1	SUSE-SU-2025:1180-1
SLES 15 SP6	kernel-syms-azure	6.4.0-150600.8.34.1	SUSE-SU-2025:1177-1

Show 4 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLE Micro 6.1	kernel-default-base	6.4.0-28.1.21.6	SUSE-SU-2025:20270-1
SLE Micro 6.1	kernel-livepatch-MICRO-6-0_Update_6 +1	1-3.1	SUSE-SU-2025:20270-1, SUSE-SU-2025:20260-1
SLE Micro 6.1	kernel-rt +4	6.4.0-28.1	SUSE-SU-2025:20270-1, SUSE-SU-2025:20260-1
SLE Micro 6.0	kernel-default-base	6.4.0-28.1.21.6	SUSE-SU-2025:20192-1
SLE Micro 6.0	kernel-livepatch-MICRO-6-0_Update_6 +1	1-3.1	SUSE-SU-2025:20192-1, SUSE-SU-2025:20190-1
SLE Micro 6.0	kernel-rt +4	6.4.0-28.1	SUSE-SU-2025:20192-1, SUSE-SU-2025:20190-1
SLE Live Patching 15 SP6	kernel-default	6.4.0-150600.23.47.2	SUSE-SU-2025:1180-1
SLE Live Patching 15 SP6	kernel-livepatch-SLE15-SP6-RT_Update_10	1-150600.1.5.1	SUSE-SU-2025:1178-1
SLE Live Patching 15 SP6	kernel-livepatch-SLE15-SP6_Update_10	1-150600.13.5.1	SUSE-SU-2025:1180-1
SUSE Real Time Module 15 SP6	kernel-rt +3	6.4.0-150600.10.34.1	SUSE-SU-2025:1178-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Leap 15.6	dtb-aarch64 +4	6.4.0-150600.23.47.1	SUSE-SU-2025:1180-1
openSUSE Leap 15.6	kernel-64kb +5	6.4.0-150600.23.47.2	SUSE-SU-2025:1180-1
openSUSE Leap 15.6	kernel-azure +1	6.4.0-150600.8.34.2	SUSE-SU-2025:1177-1
openSUSE Leap 15.6	kernel-default-base	6.4.0-150600.23.47.2.150600.12.20.2	SUSE-SU-2025:1180-1
openSUSE Leap 15.6	kernel-rt +3	6.4.0-150600.10.34.1	SUSE-SU-2025:1178-1
openSUSE Leap 15.6	kernel-syms-azure	6.4.0-150600.8.34.1	SUSE-SU-2025:1177-1

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 2 (CBL-Mariner)	kernel	5.15.179.1-1	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 9	kernel-uek +34	6.12.0-101.33.4.3.el10uek	ELSA-2025-20530, ELSA-2025-20480

Advisories 29

WID-SEC-2025-0453 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
USN-7593-1 linux-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-7602-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-7521-1 linux, linux-azure, linux-azure-6.11, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oem-6.11, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7521-3 linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7510-7 linux-aws, linux-intel-iotg-5.15, linux-nvidia-tegra-igx, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7510-3 linux-azure, linux-azure-5.15, linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7510-4 linux-intel-iot-realtime, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7510-6 linux-aws-fips vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7510-8 linux-aws-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7511-3 linux-gke vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7512-1 linux-gcp-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7510-2 linux-fips vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7511-1 linux-gcp vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7510-5 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7511-2 linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
USN-7510-1 linux, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
WID-SEC-2025-1439 Dell Secure Connect Gateway: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Oct 11, 2026
SUSE-SU-2025:20270-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2025:20192-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2025:20260-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2025:20190-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
DLA-4102-1 linux-6.1 - security update Debian Security (DSA / DLA) · Mar 9, 2026
SUSE-SU-2025:01919-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2025:1177-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2025:1180-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2025:1178-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
ELSA-2025-20530 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 18, 2025
ELSA-2025-20480 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 17, 2025

media: imx-jpeg: Fix potential error pointer dereference in detach_pm()

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

SUSE

openSUSE

Azure Linux

Oracle Linux

Advisories 29

References