cbcvebase.
CVE-2022-49106
published 2025-02-26

CVE-2022-49106: In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances vchiq_get_state()…

PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
14.9th percentile
In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances vchiq_get_state() can return a NULL pointer. So handle this cases and avoid a NULL pointer derefence in vchiq_dump_platform_instances.

Affected

12 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.17.3-1 (bookworm)linux 5.17.3-1 (bookworm)
linuxlinux
linuxlinux>= 71bad7f086419dc674244b91ca35a12bfa4cb597 < 176df12b38c70b0a45e6392a0ee5bc83489dfc29176df12b38c70b0a45e6392a0ee5bc83489dfc29
linuxlinux>= 71bad7f086419dc674244b91ca35a12bfa4cb597 < 4627250cabaa80278d3ab01ad107893cea83799f4627250cabaa80278d3ab01ad107893cea83799f
linuxlinux>= 71bad7f086419dc674244b91ca35a12bfa4cb597 < 51e5e5c34c22c0bfec0808d8c33e0b2fcf4c7c8951e5e5c34c22c0bfec0808d8c33e0b2fcf4c7c89
linuxlinux>= 71bad7f086419dc674244b91ca35a12bfa4cb597 < aa899e686d442c63d50f4d369cc02dbbf0941cb0aa899e686d442c63d50f4d369cc02dbbf0941cb0
linuxlinux_kernel< 5.15.345.15.34
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 5.16 < 5.16.205.16.20
linuxlinux_kernel>= 5.17 < 5.17.35.17.3

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.