CVE-2022-49527: media: venus: hfi: avoid null dereference in deinit
In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi: avoid null dereference in deinit
If venusprobe fails at pmruntimeputsync the error handling first calls hfidestroy and afterwards hficoredeinit. As hfidestroy sets core->ops to NULL, hficoredeinit cannot call the coredeinit function anymore.
Avoid this null pointer derefence by skipping the call when necessary.
Affected Software
Remediation
Event History
Frequently Asked Questions
Under what condition can this issue be triggered?
It occurs when venus_probe fails at pm_runtime_put_sync. The resulting error-handling path calls hfi_destroy before hfi_core_deinit, leaving core->ops set to NULL.
What is the impact of the failure?
The affected deinitialization path can dereference a NULL pointer, causing a denial of service. The supplied CVSS vector rates availability impact as high, with no confidentiality or integrity impact.
What access does an attacker need?
The supplied CVSS vector indicates local access and low privileges are required, with no user interaction required. The data does not describe a remote exploitation path.
Is a fix available?
Yes. A patch is available; the referenced stable kernel commits contain the fix.