CVE-2022-49106

staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: Oct 30, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances

vchiq_get_state() can return a NULL pointer. So handle this cases and avoid a NULL pointer derefence in vchiq_dump_platform_instances.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	71bad7f086419dc674244b91ca35a12bfa4cb597 to before 2eaeb83153b848923a0b121402b4be88223ca62eAffected 71bad7f086419dc674244b91ca35a12bfa4cb597 to before 176df12b38c70b0a45e6392a0ee5bc83489dfc29Affected 71bad7f086419dc674244b91ca35a12bfa4cb597 to before 4627250cabaa80278d3ab01ad107893cea83799fAffected 71bad7f086419dc674244b91ca35a12bfa4cb597 to before 51e5e5c34c22c0bfec0808d8c33e0b2fcf4c7c89Affected 71bad7f086419dc674244b91ca35a12bfa4cb597 to before aa899e686d442c63d50f4d369cc02dbbf0941cb0Affected
LinuxLinux	4.9Affected before 4.9Not affected 5.10.273 through 5.10.Not affected 5.15.34 through 5.15.Not affected 5.16.20 through 5.16.Not affected 5.17.3 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

71bad7f086419dc674244b91ca35a12bfa4cb597 to before 2eaeb83153b848923a0b121402b4be88223ca62eAffected
71bad7f086419dc674244b91ca35a12bfa4cb597 to before 176df12b38c70b0a45e6392a0ee5bc83489dfc29Affected
71bad7f086419dc674244b91ca35a12bfa4cb597 to before 4627250cabaa80278d3ab01ad107893cea83799fAffected
71bad7f086419dc674244b91ca35a12bfa4cb597 to before 51e5e5c34c22c0bfec0808d8c33e0b2fcf4c7c89Affected
71bad7f086419dc674244b91ca35a12bfa4cb597 to before aa899e686d442c63d50f4d369cc02dbbf0941cb0Affected

LinuxLinux

4.9Affected
before 4.9Not affected
5.10.273 through 5.10.*Not affected
5.15.34 through 5.15.*Not affected
5.16.20 through 5.16.*Not affected
5.17.3 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.