CVE-2022-49232: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49232 affects the Linux kernel's AMD display driver (drm/amd/display). The vulnerability involves a NULL pointer dereference in the amdgpudmconnectoraddcommon_modes() function, which could lead to system instability or crashes (Kernel Git).

The vulnerability occurs when amdgpudmcreatecommonmode() is assigned to mode and passed to drmmodeprobedadd() without proper NULL checking. The drmmodeprobedadd() function passes &mode->head to listaddtail(), which can result in a NULL pointer dereference if amdgpudmcreatecommonmode() fails. This issue was identified by a static analyzer and traced back to commit e7b07ceef2a6 which merged amdgpudmtypes and amdgpu_dm (Kernel Git).

When exploited, this vulnerability can cause a NULL pointer dereference, potentially leading to system crashes or denial of service conditions in systems using the AMD display driver (Kernel Git).

The issue has been fixed by adding a NULL check before calling drmmodeprobedadd(). The patch ensures that if amdgpudmcreatecommon_mode() returns NULL, the code will continue to the next iteration instead of attempting to dereference the NULL pointer (Kernel Git).