CVE-2022-49104

staging: vchiq_core: handle NULL result of find_service_by_handle

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: Aug 12, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: vchiq_core: handle NULL result of find_service_by_handle

In case of an invalid handle the function find_servive_by_handle returns NULL. So take care of this and avoid a NULL pointer dereference.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	77b3f6c49105088f157672c6e16deb0154a1383b to before aa0b7296785312a4bfa8fac0ba8ad78698fd9fcfAffected 77b3f6c49105088f157672c6e16deb0154a1383b to before 42f2142a337ee372455574809fc924580a7e51b2Affected 77b3f6c49105088f157672c6e16deb0154a1383b to before 04202f54dd8899e10f56a89c4c1ede0043fa22afAffected 77b3f6c49105088f157672c6e16deb0154a1383b to before 3b424f6586a870b8d657c5e5419465bbe0e7b61fAffected 77b3f6c49105088f157672c6e16deb0154a1383b to before ca225857faf237234d2fffe5d1919467dfadd822Affected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.111 through 5.10.Not affected 5.15.34 through 5.15.Not affected 5.16.20 through 5.16.Not affected 5.17.3 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

77b3f6c49105088f157672c6e16deb0154a1383b to before aa0b7296785312a4bfa8fac0ba8ad78698fd9fcfAffected
77b3f6c49105088f157672c6e16deb0154a1383b to before 42f2142a337ee372455574809fc924580a7e51b2Affected
77b3f6c49105088f157672c6e16deb0154a1383b to before 04202f54dd8899e10f56a89c4c1ede0043fa22afAffected
77b3f6c49105088f157672c6e16deb0154a1383b to before 3b424f6586a870b8d657c5e5419465bbe0e7b61fAffected
77b3f6c49105088f157672c6e16deb0154a1383b to before ca225857faf237234d2fffe5d1919467dfadd822Affected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.111 through 5.10.*Not affected
5.15.34 through 5.15.*Not affected
5.16.20 through 5.16.*Not affected
5.17.3 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.