CVE-2022-49491

drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()

It will cause null-ptr-deref in resource_size(), if platform_get_resource() returns NULL, move calling resource_size() after devm_ioremap_resource() that will check 'res' to avoid null-ptr-deref.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	2048e3286f347db5667708e47448176b5329e8d8 to before 452922955df215a417c80d09dab72bbc667a1861Affected 2048e3286f347db5667708e47448176b5329e8d8 to before fcd6a886443730c39170b8383411e52118aec0a3Affected 2048e3286f347db5667708e47448176b5329e8d8 to before 6ff986e057bf28e2f7690dad410768b2270f9453Affected 2048e3286f347db5667708e47448176b5329e8d8 to before a9b4599665e437de8a1152799c34841b799a2e1cAffected 2048e3286f347db5667708e47448176b5329e8d8 to before 3451852312303d54a003c73bd0ae39cebb960bd5Affected 2048e3286f347db5667708e47448176b5329e8d8 to before b54926bd558d97c888c3d2d87886f3c159d3254aAffected 2048e3286f347db5667708e47448176b5329e8d8 to before 769c53bb6116d0eaec0f1fe4ec4b27a74465cad1Affected 2048e3286f347db5667708e47448176b5329e8d8 to before ecfa52654d0c9c333c1fe1611f47105f6bce9591Affected 2048e3286f347db5667708e47448176b5329e8d8 to before f8c242908ad15bbd604d3bcb54961b7d454c43f8Affected
LinuxLinux	3.19Affected before 3.19Not affected 4.9.318 through 4.9.Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

2048e3286f347db5667708e47448176b5329e8d8 to before 452922955df215a417c80d09dab72bbc667a1861Affected
2048e3286f347db5667708e47448176b5329e8d8 to before fcd6a886443730c39170b8383411e52118aec0a3Affected
2048e3286f347db5667708e47448176b5329e8d8 to before 6ff986e057bf28e2f7690dad410768b2270f9453Affected
2048e3286f347db5667708e47448176b5329e8d8 to before a9b4599665e437de8a1152799c34841b799a2e1cAffected
2048e3286f347db5667708e47448176b5329e8d8 to before 3451852312303d54a003c73bd0ae39cebb960bd5Affected
2048e3286f347db5667708e47448176b5329e8d8 to before b54926bd558d97c888c3d2d87886f3c159d3254aAffected
2048e3286f347db5667708e47448176b5329e8d8 to before 769c53bb6116d0eaec0f1fe4ec4b27a74465cad1Affected
2048e3286f347db5667708e47448176b5329e8d8 to before ecfa52654d0c9c333c1fe1611f47105f6bce9591Affected
2048e3286f347db5667708e47448176b5329e8d8 to before f8c242908ad15bbd604d3bcb54961b7d454c43f8Affected

LinuxLinux

3.19Affected
before 3.19Not affected
4.9.318 through 4.9.*Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.