CVE-2022-49232
published 2025-02-26CVE-2022-49232: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
18.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
In amdgpu_dm_connector_add_common_modes(), amdgpu_dm_create_common_mode()
is assigned to mode and is passed to drm_mode_probed_add() directly after
that. drm_mode_probed_add() passes &mode->head to list_add_tail(), and
there is a dereference of it in list_add_tail() without recoveries, which
could lead to NULL pointer dereference on failure of
amdgpu_dm_create_common_mode().
Fix this by adding a NULL check of mode.
This bug was found by a static analyzer.
Builds with 'make allyesconfig' show no new warnings,
and our static analyzer no longer warns about this code.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e7b07ceef2a650e5ed8ca37997689e086c680daf < 2c729dec8c1e3e2892fde5ce8181553860914e74 | 2c729dec8c1e3e2892fde5ce8181553860914e74 |
| linux | linux | >= e7b07ceef2a650e5ed8ca37997689e086c680daf < 57f4ad5e286fe4599c8fc63cf89f85f9eec7f9c9 | 57f4ad5e286fe4599c8fc63cf89f85f9eec7f9c9 |
| linux | linux | >= e7b07ceef2a650e5ed8ca37997689e086c680daf < 19a7eba284790cfbba2945deb2363cf03ce41648 | 19a7eba284790cfbba2945deb2363cf03ce41648 |
| linux | linux | >= e7b07ceef2a650e5ed8ca37997689e086c680daf < bdc7429708a0772d90c208975694f7c2133b1202 | bdc7429708a0772d90c208975694f7c2133b1202 |
| linux | linux | >= e7b07ceef2a650e5ed8ca37997689e086c680daf < f4eaa999fec78dec2a9c2d797438e05cbffb125b | f4eaa999fec78dec2a9c2d797438e05cbffb125b |
| linux | linux | >= e7b07ceef2a650e5ed8ca37997689e086c680daf < 639b3b9def0a6a3f316a195d705d14113236e89c | 639b3b9def0a6a3f316a195d705d14113236e89c |
| linux | linux | >= e7b07ceef2a650e5ed8ca37997689e086c680daf < 588a70177df3b1777484267584ef38ab2ca899a2 | 588a70177df3b1777484267584ef38ab2ca899a2 |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 4.15 < 4.19.238 | 4.19.238 |
| linux | linux_kernel | >= 4.20 < 5.4.189 | 5.4.189 |
| linux | linux_kernel | >= 5.11 < 5.15.33 | 5.15.33 |
| linux | linux_kernel | >= 5.16 < 5.16.19 | 5.16.19 |
| linux | linux_kernel | >= 5.17 < 5.17.2 | 5.17.2 |
| linux | linux_kernel | >= 5.5 < 5.10.110 | 5.10.110 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q626-923j-fg7r: In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common
ghsa_unreviewed·2025-03-18
CVE-2022-49232 [MEDIUM] CWE-476 GHSA-q626-923j-fg7r: In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
In amdgpu_dm_connector_add_common_modes(), amdgpu_dm_create_common_mode()
is assigned to mode and is passed to drm_mode_probed_add() directly after
that. drm_mode_probed_add() passes &mode->head to list_add_tail(), and
there is a dereference of it in list_add_tail() without recoveries, which
could lead to NULL pointer dereference on failure of
amdgpu_dm_create_common_mode().
Fix this by adding a NULL check of mode.
This bug was found by a static analyzer.
Builds with 'make allyesconfig' show no new warnings,
and our static analyzer no longer warns about this code.
OSV
CVE-2022-49232: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_
osv·2025-02-26·CVSS 5.5
CVE-2022-49232 [MEDIUM] CVE-2022-49232: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() In amdgpu_dm_connector_add_common_modes(), amdgpu_dm_create_common_mode() is assigned to mode and is passed to drm_mode_probed_add() directly after that. drm_mode_probed_add() passes &mode->head to list_add_tail(), and there is a dereference of it in list_add_tail() without recoveries, which could lead to NULL pointer dereference on failure of amdgpu_dm_create_common_mode(). Fix this by adding a NULL check of mode. This bug was found by a static analyzer. Builds with 'make allyesconfig' show no new warnings, and our static analyzer no longer warns about this code.
Red Hat
kernel: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49232 [MEDIUM] CWE-476 kernel: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
kernel: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
In amdgpu_dm_connector_add_common_modes(), amdgpu_dm_create_common_mode()
is assigned to mode and is passed to drm_mode_probed_add() directly after
that. drm_mode_probed_add() passes &mode->head to list_add_tail(), and
there is a dereference of it in list_add_tail() without recoveries, which
could lead to NULL pointer dereference on failure of
amdgpu_dm_create_common_mode().
Fix this by adding a NULL check of mode.
This bug was found by a static analyzer.
Builds with 'make allyesconfig' show no new warnings,
and our static analyzer no lo
Debian
CVE-2022-49232: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis...
vendor_debian·2022·CVSS 5.5
CVE-2022-49232 [MEDIUM] CVE-2022-49232: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis...
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() In amdgpu_dm_connector_add_common_modes(), amdgpu_dm_create_common_mode() is assigned to mode and is passed to drm_mode_probed_add() directly after that. drm_mode_probed_add() passes &mode->head to list_add_tail(), and there is a dereference of it in list_add_tail() without recoveries, which could lead to NULL pointer dereference on failure of amdgpu_dm_create_common_mode(). Fix this by adding a NULL check of mode. This bug was found by a static analyzer. Builds with 'make allyesconfig' show no new warnings, and our static analyzer no longer warns about this code.
Scope: local
bookworm: resolved (fixed in 5.17.3-1)
bullseye: resolved
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/19a7eba284790cfbba2945deb2363cf03ce41648https://git.kernel.org/stable/c/2c729dec8c1e3e2892fde5ce8181553860914e74https://git.kernel.org/stable/c/57f4ad5e286fe4599c8fc63cf89f85f9eec7f9c9https://git.kernel.org/stable/c/588a70177df3b1777484267584ef38ab2ca899a2https://git.kernel.org/stable/c/639b3b9def0a6a3f316a195d705d14113236e89chttps://git.kernel.org/stable/c/bdc7429708a0772d90c208975694f7c2133b1202https://git.kernel.org/stable/c/f4eaa999fec78dec2a9c2d797438e05cbffb125b
2025-02-26
Published