#VU90411 NULL pointer dereference in Linux kernel - CVE-2022-48710

Vulnerability identifier: #VU90411

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48710

CWE-ID: CWE-476

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the radeon_fp_native_mode() function in drivers/gpu/drm/radeon/radeon_connectors.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/b33f7d99c9226892c7794dc2500fae35966020c9
https://git.kernel.org/stable/c/16a0f0b63c4c7eb46fc4c3f00bf2836e6ee46a9f
https://git.kernel.org/stable/c/8a89bfeef9abe93371e3ea8796377f2d132eee29
https://git.kernel.org/stable/c/28fd384c78d7d8ed8af0d086d778c3e438ba7f60
https://git.kernel.org/stable/c/fee8ae0a0bb66eb7730c22f44fbd7203f63c2eab
https://git.kernel.org/stable/c/7b7fba107b2c4ec7673d0f45bdbb9d1af697d9b9
https://git.kernel.org/stable/c/e938d24f0b7392e142b8aa434f18590d99dbe479
https://git.kernel.org/stable/c/140d9807b96e1303f6f2675a7ae8710a2094bd17
https://git.kernel.org/stable/c/a2b28708b645c5632dc93669ab06e97874c8244f

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.