CVE-2022-48718: drm: mxsfb: Fix NULL pointer dereference
Published Jun 20, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
drm: mxsfb: Fix NULL pointer dereference
mxsfb should not ever dereference the NULL pointer which drmatomicgetnewbridgestate is allowed to return. Assume a fixed format instead.
Affected Software
4 affected components
Linux Linux kernel>=5.15<5.15.27
Linux Linux kernel>=5.16<5.16.8
Linux Linux kernel=5.17-rc1
Linux Linux kernel=5.17-rc2
Remediation
Event History
Jun 20, 2024
CVE Published
via MITRE·11:13 AM
Data Sourced
via MITRE·11:13 AM
Description
Data Sourced
via NVD·11:15 AM
Description
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates local attack access and low privileges are required. No user interaction is required.
2
What is the expected security impact?
The reported impact is high availability impact, with no confidentiality or integrity impact indicated by the CVSS vector. Exploitation can result in a NULL pointer dereference.
3
Is a fix available?
Yes. A patch is available, with stable kernel patch references provided.