
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-49495 affects the Linux kernel's DRM (Direct Rendering Manager) MSM HDMI driver. The vulnerability was discovered when it was found that the platformgetresource_byname() function's return value was not being properly checked, which could lead to a null pointer dereference. This issue was identified in the HDMI HDCP support functionality (Kernel Git).
The vulnerability exists in the drivers/gpu/drm/msm/hdmi/hdmi.c file where the platformgetresource_byname() function is called to get HDMI register resources. The function could return NULL, but the code did not properly check this return value before dereferencing it. This oversight could lead to a null pointer dereference. The fix involves adding a proper check of the return value and returning -EINVAL if the resource is not found (Kernel Git).
If exploited, this vulnerability could cause a null pointer dereference in the Linux kernel's DRM MSM HDMI driver, potentially leading to a system crash or denial of service condition (AttackerKB).
The vulnerability has been patched in the Linux kernel. The fix involves adding a proper check for the return value of platformgetresource_byname() and handling the NULL case appropriately. Users should update their Linux kernel to a version that includes this fix (Kernel Git).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."