CVE-2022-48710: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48710 is a vulnerability in the Linux kernel's Radeon display driver component, specifically in the radeon_fp_native_mode() function. The vulnerability was discovered in May 2024 and affects multiple versions of the Linux kernel from 4.9.x through 5.18.x. The issue involves a potential null pointer dereference in the DRM (Direct Rendering Manager) Radeon driver (NVD).

The vulnerability occurs in the radeon_fp_native_mode() function where the return value of drm_mode_duplicate() is assigned to the mode variable without proper null checking. This can lead to a null pointer dereference if drm_mode_duplicate() fails. Additionally, the failure status of drm_cvt_mode() on another execution path was also found to need verification. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can lead to a system crash through a null pointer dereference, potentially causing a denial of service condition in affected Linux systems. The impact is limited to local attacks and requires local user privileges to exploit (NVD).

The vulnerability requires local access and low privileges to exploit. It has been classified as having low attack complexity, requiring no user interaction for exploitation (NVD).

A patch has been developed and committed to the Linux kernel that adds proper null pointer checks for both drm_mode_duplicate() and drm_cvt_mode() return values. The fix involves adding explicit checks to return NULL if either function fails, preventing the potential null pointer dereference (Kernel Patch).