CVE-2022-49485

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49485
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix null pointer dereference of pointer perfmon In the unlikely event that pointer perfmon is null the WARN_ON return path occurs after the pointer has already been deferenced. Fix this by only dereferencing perfmon after it has been null checked.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1df8f8901babcc8c8eea2c067179e455b5c828fd Patch
https://git.kernel.org/stable/c/3b72deb784a7d4ae8519a5c584cd87c4b57aa6c8 Patch
https://git.kernel.org/stable/c/4be045434923e549a50846a066a04b7b6c1d6d33 Patch
https://git.kernel.org/stable/c/ce7a1ecf3f9f1fccaf67295307614511d8e11b13 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 16:53

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/v3d: Se corrige la desreferenciación del puntero nulo del puntero perfmon. En el improbable caso de que el puntero perfmon sea nulo, la ruta de retorno WARN_ON se produce después de que el puntero ya haya sido desreferenciado. Solucione esto desreferenciando perfmon solo después de que se haya comprobado que es nulo.
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
References () https://git.kernel.org/stable/c/1df8f8901babcc8c8eea2c067179e455b5c828fd - () https://git.kernel.org/stable/c/1df8f8901babcc8c8eea2c067179e455b5c828fd - Patch
References () https://git.kernel.org/stable/c/3b72deb784a7d4ae8519a5c584cd87c4b57aa6c8 - () https://git.kernel.org/stable/c/3b72deb784a7d4ae8519a5c584cd87c4b57aa6c8 - Patch
References () https://git.kernel.org/stable/c/4be045434923e549a50846a066a04b7b6c1d6d33 - () https://git.kernel.org/stable/c/4be045434923e549a50846a066a04b7b6c1d6d33 - Patch
References () https://git.kernel.org/stable/c/ce7a1ecf3f9f1fccaf67295307614511d8e11b13 - () https://git.kernel.org/stable/c/ce7a1ecf3f9f1fccaf67295307614511d8e11b13 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 16:53

NVD link : CVE-2022-49485

Mitre link : CVE-2022-49485

CVE.ORG link : CVE-2022-49485

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference