CVE-2022-49960
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
18/06/2025
Last modified:
14/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/i915: fix null pointer dereference<br />
<br />
Asus chromebook CX550 crashes during boot on v5.17-rc1 kernel.<br />
The root cause is null pointer defeference of bi_next<br />
in tgl_get_bw_info() in drivers/gpu/drm/i915/display/intel_bw.c.<br />
<br />
BUG: kernel NULL pointer dereference, address: 000000000000002e<br />
PGD 0 P4D 0<br />
Oops: 0002 [#1] PREEMPT SMP NOPTI<br />
CPU: 0 PID: 1 Comm: swapper/0 Tainted: G U 5.17.0-rc1<br />
Hardware name: Google Delbin/Delbin, BIOS Google_Delbin.13672.156.3 05/14/2021<br />
RIP: 0010:tgl_get_bw_info+0x2de/0x510<br />
...<br />
[ 2.554467] Call Trace:<br />
[ 2.554467] <br />
[ 2.554467] intel_bw_init_hw+0x14a/0x434<br />
[ 2.554467] ? _printk+0x59/0x73<br />
[ 2.554467] ? _dev_err+0x77/0x91<br />
[ 2.554467] i915_driver_hw_probe+0x329/0x33e<br />
[ 2.554467] i915_driver_probe+0x4c8/0x638<br />
[ 2.554467] i915_pci_probe+0xf8/0x14e<br />
[ 2.554467] ? _raw_spin_unlock_irqrestore+0x12/0x2c<br />
[ 2.554467] pci_device_probe+0xaa/0x142<br />
[ 2.554467] really_probe+0x13f/0x2f4<br />
[ 2.554467] __driver_probe_device+0x9e/0xd3<br />
[ 2.554467] driver_probe_device+0x24/0x7c<br />
[ 2.554467] __driver_attach+0xba/0xcf<br />
[ 2.554467] ? driver_attach+0x1f/0x1f<br />
[ 2.554467] bus_for_each_dev+0x8c/0xc0<br />
[ 2.554467] bus_add_driver+0x11b/0x1f7<br />
[ 2.554467] driver_register+0x60/0xea<br />
[ 2.554467] ? mipi_dsi_bus_init+0x16/0x16<br />
[ 2.554467] i915_init+0x2c/0xb9<br />
[ 2.554467] ? mipi_dsi_bus_init+0x16/0x16<br />
[ 2.554467] do_one_initcall+0x12e/0x2b3<br />
[ 2.554467] do_initcall_level+0xd6/0xf3<br />
[ 2.554467] do_initcalls+0x4e/0x79<br />
[ 2.554467] kernel_init_freeable+0xed/0x14d<br />
[ 2.554467] ? rest_init+0xc1/0xc1<br />
[ 2.554467] kernel_init+0x1a/0x120<br />
[ 2.554467] ret_from_fork+0x1f/0x30<br />
[ 2.554467] <br />
...<br />
Kernel panic - not syncing: Fatal exception<br />
<br />
(cherry picked from commit c247cd03898c4c43c3bce6d4014730403bc13032)
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.17 (including) | 5.19.8 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



