CVE-2022-49527

media: venus: hfi: avoid null dereference in deinit

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: Aug 15, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: venus: hfi: avoid null dereference in deinit

If venus_probe fails at pm_runtime_put_sync the error handling first calls hfi_destroy and afterwards hfi_core_deinit. As hfi_destroy sets core->ops to NULL, hfi_core_deinit cannot call the core_deinit function anymore.

Avoid this null pointer derefence by skipping the call when necessary.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	eeefa2eae8fc82ad757a2241b9f82ac33e99e6b4 to before 27ad46da44177a78a4a0cae6fe03906888c61aa1Affected 08b1cf474b7f72750adebe0f0a35f8e9a3eb75f6 to before 9c385b961d4c378228e80f6abea8509cb67feab6Affected 08b1cf474b7f72750adebe0f0a35f8e9a3eb75f6 to before 0ed5a643b1a4a46b9b7bfba5d468c10cc30e1359Affected 08b1cf474b7f72750adebe0f0a35f8e9a3eb75f6 to before b73ed0510bb8d9647cd8e8a4c4c8772bbe545c3aAffected 08b1cf474b7f72750adebe0f0a35f8e9a3eb75f6 to before 86594f6af867b5165d2ba7b5a71fae3a5961e56cAffected 54f1727a0956bcbed3a88540577c5e7dbab93aecAffected 5.10.94 to before 5.10.121Affected 5.12.3 to before 5.13Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

eeefa2eae8fc82ad757a2241b9f82ac33e99e6b4 to before 27ad46da44177a78a4a0cae6fe03906888c61aa1Affected
08b1cf474b7f72750adebe0f0a35f8e9a3eb75f6 to before 9c385b961d4c378228e80f6abea8509cb67feab6Affected
08b1cf474b7f72750adebe0f0a35f8e9a3eb75f6 to before 0ed5a643b1a4a46b9b7bfba5d468c10cc30e1359Affected
08b1cf474b7f72750adebe0f0a35f8e9a3eb75f6 to before b73ed0510bb8d9647cd8e8a4c4c8772bbe545c3aAffected
08b1cf474b7f72750adebe0f0a35f8e9a3eb75f6 to before 86594f6af867b5165d2ba7b5a71fae3a5961e56cAffected
54f1727a0956bcbed3a88540577c5e7dbab93aecAffected
5.10.94 to before 5.10.121Affected
5.12.3 to before 5.13Affected

LinuxLinux

5.13Affected
before 5.13Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.