IT

Tracker / CVE-2022-49202

CVE-2022-49202

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: add missing NULL check in h5_enqueue Syzbot hit general protection fault in __pm_runtime_resume(). The problem was in missing NULL check. hu->serdev can be NULL and we should not blindly pass &serdev->dev somewhere, since it will cause GPF.

Affected products and versions

linux linux_kernel · 5.15 → 5.15.33
linux linux_kernel · 5.16 → 5.16.19
linux linux_kernel · 5.17 → 5.17.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References