CVE-2022-49232: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49232 affects the Linux kernel's AMD display driver (drm/amd/display). The vulnerability involves a NULL pointer dereference in the amdgpu_dm_connector_add_common_modes() function, which could lead to system instability or crashes (Kernel Git).

The vulnerability occurs when amdgpu_dm_create_common_mode() is assigned to mode and passed to drm_mode_probed_add() without proper NULL checking. The drm_mode_probed_add() function passes &mode->head to list_add_tail(), which can result in a NULL pointer dereference if amdgpu_dm_create_common_mode() fails. This issue was identified by a static analyzer and traced back to commit e7b07ceef2a6 which merged amdgpu_dm_types and amdgpu_dm (Kernel Git).

When exploited, this vulnerability can cause a NULL pointer dereference, potentially leading to system crashes or denial of service conditions in systems using the AMD display driver (Kernel Git).

The vulnerability can be triggered through the AMD display driver's mode setting functionality. It requires access to a system with AMD graphics hardware using the affected driver version (Kernel Git).

The issue has been fixed by adding a NULL check before calling drm_mode_probed_add(). The patch ensures that if amdgpu_dm_create_common_mode() returns NULL, the code will continue to the next iteration instead of attempting to dereference the NULL pointer (Kernel Git).