CVE-2022-49974CWE-476

CVE-2022-49974

High · published June 18, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: nintendo: fix rumble worker null pointer deref

We can dereference a null pointer trying to queue work to a destroyed

workqueue.

If the device is disconnected, nintendo_hid_remove is called, in which

the rumble_queue is destroyed. Avoid using that queue to defer rumble

work once the controller state is set to JOYCON_CTLR_STATE_REMOVED.

This eliminates the null pointer dereference.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.1th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-06-18T15:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.16, < 5.19.75.19.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
https://git.kernel.org/stable/c/1ff89e06c2e5fab30274e4b02360d4241d6e605e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7c6e6c334154be16740b44dcd7638fb510b9bd91 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 JUN 11:00Z
    HID: nintendo: fix rumble worker null pointer deref
    cvelistv5