CVE-2022-49527CWE-476

CVE-2022-49527

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
17.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: venus: hfi: avoid null dereference in deinit

If venus_probe fails at pm_runtime_put_sync the error handling first

calls hfi_destroy and afterwards hfi_core_deinit. As hfi_destroy sets

core->ops to NULL, hfi_core_deinit cannot call the core_deinit function

anymore.

Avoid this null pointer derefence by skipping the call when necessary.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00264 · 17.4th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-02-26T12:01Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel< 4.14.2834.14.283
linux/linux_kernel≥ 4.15, < 4.19.2474.19.247
linux/linux_kernel≥ 4.20, < 5.4.1985.4.198
linux/linux_kernel≥ 5.5, < 5.10.1215.10.121
linux/linux_kernel≥ 5.11, < 5.15.465.15.46
linux/linux_kernel≥ 5.16, < 5.17.145.17.14
linux/linux_kernel≥ 5.18, < 5.18.35.18.3
References (5)
EPSS history
Timeline
  • 26 FEB 02:13Z
    media: venus: hfi: avoid null dereference in deinit
    cvelistv5