The following commit is needed to fix CVE-2022-3239: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c08eadca1bdfa099e20a32f8fa4b52b2f672236d Dongliang Mu (1): media: em28xx: initialize refcount before kref_get drivers/media/usb/em28xx/em28xx-cards.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) base-commit: 4edbf74132a4c9b78dc2ee61d31abef15200a781 -- 2.37.3