CVE-2022-49202: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49202 affects the Linux kernel's Bluetooth HCI UART H5 driver. The vulnerability was discovered when Syzbot detected a general protection fault in the _pmruntimeresume() function. The issue stems from a missing NULL pointer check in the h5enqueue function, where hu->serdev could be NULL, potentially leading to a system crash (Kernel Commit).

The vulnerability exists in the drivers/bluetooth/hcih5.c file where the h5enqueue function fails to check if hu->serdev is NULL before accessing serdev->dev. This oversight can lead to a general protection fault when attempting to perform runtime power management operations on a potentially NULL device pointer (Kernel Commit).

When exploited, this vulnerability can cause a general protection fault in the kernel's _pmruntime_resume() function, potentially leading to a system crash or denial of service condition (Kernel Commit).

The issue has been fixed by adding a NULL pointer check before accessing hu->serdev in the h5_enqueue function. The fix was implemented in commit 32cb08e958696908a9aad5e49a78d74f7e32fffb and backported to stable kernel versions (Kernel Commit).