0.0
NA
CVE-2026-53382
media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
Description

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syzbot reported a general protection fault in vidtv_psi_ts_psi_write_into [1]. vidtv_mux_get_pid_ctx() can return NULL, but vidtv_mux_push_si() does not check for this before dereferencing the returned pointer to access the continuity counter. This leads to a general protection fault when accessing a near-NULL address. The root cause is that vidtv_mux_pid_ctx_init() does not check the return value of vidtv_mux_create_pid_ctx_once() for PMT section PIDs. If the allocation fails, the PID context is never created, but init returns success. The subsequent vidtv_mux_push_si() call then gets NULL from vidtv_mux_get_pid_ctx() and crashes. Fix both the root cause (add error check in vidtv_mux_pid_ctx_init for PMT PIDs) and add defensive NULL checks in vidtv_mux_push_si for all vidtv_mux_get_pid_ctx() calls. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] Workqueue: events vidtv_mux_tick RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 drivers/media/test-drivers/vidtv/vidtv_psi.c:197 Call Trace: <TASK> vidtv_psi_table_header_write_into drivers/media/test-drivers/vidtv/vidtv_psi.c:799 [inline] vidtv_psi_pmt_write_into+0x3b2/0xa70 drivers/media/test-drivers/vidtv/vidtv_psi.c:1231 vidtv_mux_push_si+0x932/0xe80 drivers/media/test-drivers/vidtv/vidtv_mux.c:196 vidtv_mux_tick+0xe9b/0x1480 drivers/media/test-drivers/vidtv/vidtv_mux.c:408

INFO

Published Date :

July 19, 2026, 12:16 p.m.

Last Modified :

July 19, 2026, 12:16 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2026-53382 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

Solution
Fix NULL pointer dereference by adding error checks and NULL checks.
  • Add error check for PID context creation.
  • Add NULL checks in vidtv_mux_push_si.
  • Apply provided kernel patch.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-53382 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-53382 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-53382 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-53382 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jul. 19, 2026

    Action Type Old Value New Value
    Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'f90cf6079bf67988f8b1ad1ade70fc89d0080905', 'lessThan': '455bc12e7b73ab5a2dfcb47822e91e772bc6c42e', 'versionType': 'git'}, {'status': 'affected', 'version': 'f90cf6079bf67988f8b1ad1ade70fc89d0080905', 'lessThan': 'f0f5a1d7056980a0d512456fdb370cfb72bba86a', 'versionType': 'git'}, {'status': 'affected', 'version': 'f90cf6079bf67988f8b1ad1ade70fc89d0080905', 'lessThan': '6df7e16d4f742c80add58995a6e69385b97aa9e6', 'versionType': 'git'}, {'status': 'affected', 'version': 'f90cf6079bf67988f8b1ad1ade70fc89d0080905', 'lessThan': 'cd923dadefadb9671b5ac341b672ff424d429c39', 'versionType': 'git'}, {'status': 'affected', 'version': 'f90cf6079bf67988f8b1ad1ade70fc89d0080905', 'lessThan': '353d9578951dd38bc9679308f5b618ceed1f20fa', 'versionType': 'git'}, {'status': 'affected', 'version': 'f90cf6079bf67988f8b1ad1ade70fc89d0080905', 'lessThan': 'f965cf22dda7f512f4922415894c3e528269a4ae', 'versionType': 'git'}, {'status': 'affected', 'version': 'f90cf6079bf67988f8b1ad1ade70fc89d0080905', 'lessThan': 'b28b12be6e8910489e6800ed93ea4d41dfe19683', 'versionType': 'git'}, {'status': 'affected', 'version': 'f90cf6079bf67988f8b1ad1ade70fc89d0080905', 'lessThan': '232e4b313ea342672edf8947e067c0de4328405b', 'versionType': 'git'}, {'status': 'affected', 'version': 'f90cf6079bf67988f8b1ad1ade70fc89d0080905', 'lessThan': '7d8bf3d8f91073f4db347ed3aa6302b56107499c', 'versionType': 'git'}], 'programFiles': ['drivers/media/test-drivers/vidtv/vidtv_mux.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.10'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.10', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.260', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.211', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.177', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.144', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.95', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.37', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.14', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1.2', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/media/test-drivers/vidtv/vidtv_mux.c'], 'defaultStatus': 'affected'}]
    Added Description In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syzbot reported a general protection fault in vidtv_psi_ts_psi_write_into [1]. vidtv_mux_get_pid_ctx() can return NULL, but vidtv_mux_push_si() does not check for this before dereferencing the returned pointer to access the continuity counter. This leads to a general protection fault when accessing a near-NULL address. The root cause is that vidtv_mux_pid_ctx_init() does not check the return value of vidtv_mux_create_pid_ctx_once() for PMT section PIDs. If the allocation fails, the PID context is never created, but init returns success. The subsequent vidtv_mux_push_si() call then gets NULL from vidtv_mux_get_pid_ctx() and crashes. Fix both the root cause (add error check in vidtv_mux_pid_ctx_init for PMT PIDs) and add defensive NULL checks in vidtv_mux_push_si for all vidtv_mux_get_pid_ctx() calls. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] Workqueue: events vidtv_mux_tick RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 drivers/media/test-drivers/vidtv/vidtv_psi.c:197 Call Trace: <TASK> vidtv_psi_table_header_write_into drivers/media/test-drivers/vidtv/vidtv_psi.c:799 [inline] vidtv_psi_pmt_write_into+0x3b2/0xa70 drivers/media/test-drivers/vidtv/vidtv_psi.c:1231 vidtv_mux_push_si+0x932/0xe80 drivers/media/test-drivers/vidtv/vidtv_mux.c:196 vidtv_mux_tick+0xe9b/0x1480 drivers/media/test-drivers/vidtv/vidtv_mux.c:408
    Added Reference https://git.kernel.org/stable/c/232e4b313ea342672edf8947e067c0de4328405b
    Added Reference https://git.kernel.org/stable/c/353d9578951dd38bc9679308f5b618ceed1f20fa
    Added Reference https://git.kernel.org/stable/c/455bc12e7b73ab5a2dfcb47822e91e772bc6c42e
    Added Reference https://git.kernel.org/stable/c/6df7e16d4f742c80add58995a6e69385b97aa9e6
    Added Reference https://git.kernel.org/stable/c/7d8bf3d8f91073f4db347ed3aa6302b56107499c
    Added Reference https://git.kernel.org/stable/c/b28b12be6e8910489e6800ed93ea4d41dfe19683
    Added Reference https://git.kernel.org/stable/c/cd923dadefadb9671b5ac341b672ff424d429c39
    Added Reference https://git.kernel.org/stable/c/f0f5a1d7056980a0d512456fdb370cfb72bba86a
    Added Reference https://git.kernel.org/stable/c/f965cf22dda7f512f4922415894c3e528269a4ae
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.