CVE-2022-3112

What it actually does

Null pointer dereference in amvdec_set_canvases due to unchecked kzalloc return value, causing kernel crash on allocation failure during media decode canvas setup.

Why it matters to the business

Local denial of service that can interrupt media processing workloads on affected systems, with low likelihood of remote exploitation or data compromise.

How an attack unfolds

An attacker with local access triggers the vulnerable code path in the media decoder by supplying input that forces kzalloc failure, dereferencing the null pointer and crashing the kernel.

How to fix it

Update gst-plugins-good1.0 on Debian 11 to 1.18.4-2+deb11u1, on Debian 12/13 to 1.20.3-1, and gstreamer to commit ccf22e315cedf81e0075ab179ffb1b733da5206e or later equivalent kernel patch.

How to confirm the fix worked

Verify installed package versions against the listed fixed releases and confirm the presence of the kzalloc return-value check in vdec_helpers.c.

Typical attack path

1. Obtain local user access on target system
2. Invoke media decode operations that reach amvdec_set_canvases
3. Force memory pressure to cause kzalloc failure
4. Trigger null pointer dereference and kernel panic

How to detect it

Review kernel logs for null pointer dereference oops mentioning amvdec_set_canvases or vdec_helpers.c; correlate with local user media processing sessions.

What your security team should do

• Apply the listed package updates on all affected systems
• Restrict untrusted local users from media decode APIs where feasible
• Monitor for kernel oops related to vdec_helpers