CVE-2022-49615

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A kernel NULL pointer dereference issue has been identified in the Linux kernel, specifically in the ASoC: rt711-sdca component. This issue occurs when an IO error happens during initial settings operations, before the codec probe function is called, and the rt711->component has not been assigned yet, resulting in a kernel panic. The problem arises from the use of component->dev instead of slave->dev.

Recommendations To resolve this issue, apply the patch that changes component->dev to slave->dev in the affected component. At the moment, there is no information about a newer version that contains a fix for this vulnerability.