CVE-2022-49495
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2022-49495 affects the Linux kernel's DRM (Direct Rendering Manager) MSM HDMI driver. The vulnerability was discovered when it was found that the platformgetresource_byname() function's return value was not being properly checked, which could lead to a null pointer dereference. This issue was identified in the HDMI HDCP support functionality (Kernel Git).

Technical details

The vulnerability exists in the drivers/gpu/drm/msm/hdmi/hdmi.c file where the platformgetresource_byname() function is called to get HDMI register resources. The function could return NULL, but the code did not properly check this return value before dereferencing it. This oversight could lead to a null pointer dereference. The fix involves adding a proper check of the return value and returning -EINVAL if the resource is not found (Kernel Git).

Impact

If exploited, this vulnerability could cause a null pointer dereference in the Linux kernel's DRM MSM HDMI driver, potentially leading to a system crash or denial of service condition (AttackerKB).

Mitigation and workarounds

The vulnerability has been patched in the Linux kernel. The fix involves adding a proper check for the return value of platformgetresource_byname() and handling the NULL case appropriately. Users should update their Linux kernel to a version that includes this fix (Kernel Git).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40205HIGH7.8
  • Linux KernelLinux Kernel
  • linux-gcp-5.4
NoYesNov 12, 2025
CVE-2025-40211HIGH7.1
  • Linux KernelLinux Kernel
  • linux-gcp-6.8
NoYesNov 21, 2025
CVE-2025-40206MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-zfcpdump-modules-extra
NoYesNov 12, 2025
CVE-2025-40210MEDIUM5.1
  • Linux KernelLinux Kernel
  • kernel-rt-64k-modules
NoYesNov 21, 2025
CVE-2025-40212N/AN/A
  • Linux KernelLinux Kernel
  • linux-azure-6.14
NoYesNov 24, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management