IT

Tracker / CVE-2022-49491

CVE-2022-49491

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() It will cause null-ptr-deref in resource_size(), if platform_get_resource() returns NULL, move calling resource_size() after devm_ioremap_resource() that will check 'res' to avoid null-ptr-deref.

Affected products and versions

linux linux_kernel · 3.19 → 4.9.318
linux linux_kernel · 4.10 → 4.14.283
linux linux_kernel · 4.15 → 4.19.247
linux linux_kernel · 4.20 → 5.4.198
linux linux_kernel · 5.11 → 5.15.46
linux linux_kernel · 5.16 → 5.17.14
linux linux_kernel · 5.18 → 5.18.3
linux linux_kernel · 5.5 → 5.10.121

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References