CVE-2025-38225 media: imx-jpeg: Cleanup after an allocation error

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2024-57978 and CVE-2025-38225 Address imx-jpeg Vulnerabilities Two vulnerabilities in the imx-jpeg media driver have been identified. CVE-2024-57978 involves a potential error pointer dereference in the detach_pm() function, while CVE-2025-38225 addresses cleanup after an allocation error. Both vulnerabilities could affect systems utilizing this driver. 2 sources 39