Executive brief
A vulnerability was identified in the Linux kernel's Rockchip RGA (Raster Graphic Acceleration) driver, which is used for hardware-accelerated graphics processing on certain devices. An error in how the system handles memory buffers could lead to a system crash or instability. This issue primarily affects the reliability of devices using Rockchip processors when processing specific media or graphics tasks.
Technical details
A vulnerability exists in the Rockchip RGA driver within the Linux kernel due to a missing error check in the rga_buf_init() function. The function calls rga_get_frame(), which can return an error pointer (ERR_PTR) if the buffer type is unsupported or invalid. However, rga_buf_init() fails to validate this return value before dereferencing it to access the 'size' field. This leads to an invalid pointer dereference, which typically results in a kernel panic (denial of service). The issue has been resolved by adding proper IS_ERR() validation and returning the appropriate error code.
Affected products
- Linux Linux Kernel Rockchip RGA driver
Timeline
- 2025-12-27: other: Patch authored
- 2026-01-13: other: Patch committed to mainline
- 2026-05-08: advisory: CVE published