CVE-2022-48710: drm/radeon: fix a possible null pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: fix a possible null pointer dereference
In radeonfpnativemode(), the return value of drmmodeduplicate() is assigned to mode, which will lead to a NULL pointer dereference on failure of drmmodeduplicate(). Add a check to avoid npd.
The failure status of drmcvtmode() on the other path is checked too.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48710?
CVE-2022-48710 is classified as a medium severity vulnerability due to the potential for a null pointer dereference.
Which systems are affected by CVE-2022-48710?
CVE-2022-48710 affects multiple versions of the Linux kernel from 4.9 up to 5.18, specifically certain code paths in the radeon driver.
How do I fix CVE-2022-48710?
To mitigate CVE-2022-48710, users should update their Linux kernel to a patched version that addresses the vulnerability.
What does CVE-2022-48710 exploit?
CVE-2022-48710 exploits a flaw in the radeon_fp_native_mode function, which can lead to a null pointer dereference on failure.
Is there a workaround for CVE-2022-48710?
There is no known workaround for CVE-2022-48710; the recommended approach is to apply the available kernel updates.