CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of video devices, specifically in the zoran driver, where a registered video_device can be freed multiple times due to improper memory management during device teardown. This could lead to potential memory corruption or crashes, impacting system stability and security. Organizations utilizing Linux systems with video device functionality should prioritize addressing this issue to prevent exploitation and ensure reliable operation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: media: zoran: Avoid freeing a registered video_device twice zoran_init_video_device() installs zoran_vdev_release() as the video_device release callback through zoran_template. After video_register_device() succeeds, video_unregister_device() drops the registered video_device reference and the V4L2 core eventually invokes that release callback, which kfree()s the video_device. zoran_exit_video_devices() called video_unregister_device() and then kfree(zr->video_dev), so device teardown could free the same video_device twice. Remove the direct kfree() and clear the cached pointer after unregistering. The pre-registration failure path keeps its manual free because the video_device was not registered there. This issue was found by a static analysis checker and confirmed by manual source review.