First published: Tue May 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix a possible null pointer dereference In radeon_fp_native_mode(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd. The failure status of drm_cvt_mode() on the other path is checked too.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux kernel | <4.9.318 | |
Linux kernel | >=4.10<4.14.283 | |
Linux kernel | >=4.15<4.19.247 | |
Linux kernel | >=4.20<5.4.198 | |
Linux kernel | >=5.5<5.10.122 | |
Linux kernel | >=5.11<5.15.47 | |
Linux kernel | >=5.16<5.17.15 | |
Linux kernel | >=5.18<5.18.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-48710 is classified as a medium severity vulnerability due to the potential for a null pointer dereference.
CVE-2022-48710 affects multiple versions of the Linux kernel from 4.9 up to 5.18, specifically certain code paths in the radeon driver.
To mitigate CVE-2022-48710, users should update their Linux kernel to a patched version that addresses the vulnerability.
CVE-2022-48710 exploits a flaw in the radeon_fp_native_mode function, which can lead to a null pointer dereference on failure.
There is no known workaround for CVE-2022-48710; the recommended approach is to apply the available kernel updates.