CVE-2022-49483
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
26/02/2025
Last modified:
17/03/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit<br />
<br />
If edp modeset init is failed due to panel being not ready and<br />
probe defers during drm bind, avoid clearing irqs and dereference<br />
hw_intr when hw_intr is null.<br />
<br />
BUG: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000<br />
<br />
Call trace:<br />
dpu_core_irq_uninstall+0x50/0xb0<br />
dpu_irq_uninstall+0x18/0x24<br />
msm_drm_uninit+0xd8/0x16c<br />
msm_drm_bind+0x580/0x5fc<br />
try_to_bring_up_master+0x168/0x1c0<br />
__component_add+0xb4/0x178<br />
component_add+0x1c/0x28<br />
dp_display_probe+0x38c/0x400<br />
platform_probe+0xb0/0xd0<br />
really_probe+0xcc/0x2c8<br />
__driver_probe_device+0xbc/0xe8<br />
driver_probe_device+0x48/0xf0<br />
__device_attach_driver+0xa0/0xc8<br />
bus_for_each_drv+0x8c/0xd8<br />
__device_attach+0xc4/0x150<br />
device_initial_probe+0x1c/0x28<br />
<br />
Changes in V2:<br />
- Update commit message and coreect fixes tag.<br />
<br />
Patchwork: https://patchwork.freedesktop.org/patch/484430/
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.17.14 (excluding) |
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.18 (including) | 5.18.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page