CVE-2022-49490

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, where the mdp5 pipe release function does not check for errors returned by mdp5 get global state, potentially leading to a NULL dereference error. This issue arises when mdp5 get global state attempts to acquire the modeset lock and encounters a deadlock, resulting in a -EDEADLK error. To mitigate this, the mdp5 pipe release function has been modified to propagate any errors returned by mdp5 get global state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.