CVE-2022-49483: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49483 affects the Linux kernel's DRM (Direct Rendering Manager) subsystem, specifically in the MSM display driver (drm/msm/disp/dpu1). The vulnerability was discovered when the edp modeset initialization fails due to a panel not being ready during DRM bind, leading to a NULL pointer dereference when attempting to clear hardware interrupts. This issue was fixed in the Linux kernel through a patch that adds proper NULL pointer checking (Kernel Patch).

The vulnerability occurs in the dpucoreirquninstall function when hwintr is NULL. During DRM uninit, the code attempts to clear hardware interrupts without checking if hwintr is properly initialized, leading to a NULL pointer dereference at virtual address 0000000000000000. The issue manifests in the call trace through dpucoreirquninstall+0x50/0xb0, dpuirquninstall+0x18/0x24, and msmdrmuninit+0xd8/0x16c (Kernel Patch).

When triggered, this vulnerability causes a kernel NULL pointer dereference, which can lead to a system crash or denial of service condition. This primarily affects systems using the MSM DRM driver with EDP (Embedded DisplayPort) configurations (Kernel Patch).

The issue has been fixed by adding a NULL pointer check before accessing hwintr in the dpucoreirquninstall function. The fix ensures that if hw_intr is NULL, the function returns early before attempting to access any members of the structure. The patch has been merged into the Linux kernel (Kernel Patch).