CVE-2022-49232

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
26/02/2025
Last modified:
01/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()<br /> <br /> In amdgpu_dm_connector_add_common_modes(), amdgpu_dm_create_common_mode()<br /> is assigned to mode and is passed to drm_mode_probed_add() directly after<br /> that. drm_mode_probed_add() passes &amp;mode-&gt;head to list_add_tail(), and<br /> there is a dereference of it in list_add_tail() without recoveries, which<br /> could lead to NULL pointer dereference on failure of<br /> amdgpu_dm_create_common_mode().<br /> <br /> Fix this by adding a NULL check of mode.<br /> <br /> This bug was found by a static analyzer.<br /> <br /> Builds with &amp;#39;make allyesconfig&amp;#39; show no new warnings,<br /> and our static analyzer no longer warns about this code.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.15 (including) 4.19.238 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.189 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.110 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.33 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 5.16.19 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.17 (including) 5.17.2 (excluding)