In the Linux kernel, the following vulnerability has been resolved:

media: cx231xx: set device_caps for 417

The video_device for the MPEG encoder did not set device_caps.

Add this, otherwise the video device can't be registered (you get a
WARN_ON instead).

Not seen before since currently 417 support is disabled, but I found
this while experimenting with it.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00036.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux
  • Linux Kernel
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0884dd3abbe80307a2d4cbdbe5e312be164f8adb cve-icon cve-icon
https://git.kernel.org/stable/c/2ad41beb7df3bd63b209842d16765ec59dafe6e4 cve-icon cve-icon
https://git.kernel.org/stable/c/4731d5328f507ae8fd8a57abbca9119ec7a8d665 cve-icon cve-icon
https://git.kernel.org/stable/c/5c9eca180a4235abd56cc7f7308ca72128d93dce cve-icon cve-icon
https://git.kernel.org/stable/c/9d1a5be86dbe074bd8dd6bdd63a99d6bb66d5930 cve-icon cve-icon
https://git.kernel.org/stable/c/a79efc44b51432490538a55b9753a721f7d3ea42 cve-icon cve-icon
https://git.kernel.org/stable/c/c91447e35b9bea60bda4408c48e7891d14351021 cve-icon cve-icon
https://git.kernel.org/stable/c/e43fd82bb2110bf9d13d800cdc49cceddfd0ede5 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025061829-CVE-2025-38044-4caf@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38044 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38044 cve-icon
History

Tue, 08 Jul 2025 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-99
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Fri, 20 Jun 2025 23:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Wed, 18 Jun 2025 09:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: set device_caps for 417 The video_device for the MPEG encoder did not set device_caps. Add this, otherwise the video device can't be registered (you get a WARN_ON instead). Not seen before since currently 417 support is disabled, but I found this while experimenting with it.
Title media: cx231xx: set device_caps for 417
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-06-18T09:33:28.669Z

Reserved: 2025-04-16T04:51:23.979Z

Link: CVE-2025-38044

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-06-18T10:15:36.913

Modified: 2025-06-18T13:46:52.973

Link: CVE-2025-38044

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-06-18T00:00:00Z

Links: CVE-2025-38044 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-06-23T08:53:48Z