CVE-2022-49485

published 2025-02-26

CVE-2022-49485: In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix null pointer dereference of pointer perfmon In the unlikely event that pointer…

Priority P4 17 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Fix null pointer dereference of pointer perfmon

In the unlikely event that pointer perfmon is null the WARN_ON return path
occurs after the pointer has already been deferenced. Fix this by only
dereferencing perfmon after it has been null checked.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.18.5-1 (bookworm)	linux 5.18.5-1 (bookworm)
linux	linux	—	—
linux	linux	>= 26a4dc29b74a137f45665089f6d3d633fcc9b662 < 4be045434923e549a50846a066a04b7b6c1d6d33	4be045434923e549a50846a066a04b7b6c1d6d33
linux	linux	>= 26a4dc29b74a137f45665089f6d3d633fcc9b662 < 1df8f8901babcc8c8eea2c067179e455b5c828fd	1df8f8901babcc8c8eea2c067179e455b5c828fd
linux	linux	>= 26a4dc29b74a137f45665089f6d3d633fcc9b662 < 3b72deb784a7d4ae8519a5c584cd87c4b57aa6c8	3b72deb784a7d4ae8519a5c584cd87c4b57aa6c8
linux	linux	>= 26a4dc29b74a137f45665089f6d3d633fcc9b662 < ce7a1ecf3f9f1fccaf67295307614511d8e11b13	ce7a1ecf3f9f1fccaf67295307614511d8e11b13
linux	linux_kernel	>= 0 < 5.18.5-1	5.18.5-1
linux	linux_kernel	>= 0 < 5.18.5-1	5.18.5-1
linux	linux_kernel	>= 0 < 5.18.5-1	5.18.5-1
linux	linux_kernel	>= 5.15 < 5.15.46	5.15.46
linux	linux_kernel	>= 5.16 < 5.17.14	5.17.14
linux	linux_kernel	>= 5.18 < 5.18.3	5.18.3

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-476