CVE-2022-48772

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null-pointer dereference issue has been resolved in the Linux kernel. The issue occurred because the driver did not check whether the client provided the platform data. Technical details about the issue include a null-pointer dereference in the kmemdup function, which is called by the lgdt3306a probe function. The vulnerability can be identified by a log message indicating a BUG: KASAN: null-ptr-deref in kmemdup+0x30/0x40.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.