NULL pointer dereference in Linux kernel disp mdp5 driver

1) NULL pointer dereference

EUVDB-ID: #VU104586

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49488

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the mdp5_mixer_assign() function in drivers/gpu/drm/msm/disp/mdp5/mdp5_mixer.c, within the mdp5_crtc_setup_pipeline() function in drivers/gpu/drm/msm/disp/mdp5/mdp5_crtc.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/09bdeedc1fc53e64b8282e1de67752c69e43bdba
https://git.kernel.org/stable/c/1a5d1474026ea4f1a6f931075ca2adb884af39cf
https://git.kernel.org/stable/c/22d8424913b1348c6324916745fadaeea5273f0e
https://git.kernel.org/stable/c/46e5ce63924a96af452c4fc5ee0bb3b241e1b9f4
https://git.kernel.org/stable/c/47e393061049aff6818d1b9fdca7351411a23fc2
https://git.kernel.org/stable/c/883f1d52a57bf51e1d7a80c432345e2c6222477e
https://git.kernel.org/stable/c/ca75f6f7c6f89365e40f10f641b15981b1f07c31

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.