CVE-2022-49527

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the venus driver. The error occurs when venus probe fails at pm runtime put sync, leading to a sequence where hfi destroy is called before hfi core deinit. As hfi destroy sets core->ops to NULL, hfi core deinit cannot call the core deinit function, resulting in a null pointer dereference. This issue is resolved by skipping the call to hfi core deinit when necessary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.