Riskcovery

CVE-2022-49615

ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error

The initial settings will be written before the codec probe function. But, the rt711->component doesn't be assigned yet. If IO error happened during initial settings operations, it will cause the kernel panic. This patch changed component->dev to slave->dev to fix this issue.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 7ad4d237e7c4a5dcc71cf438f646744b4484f1da to before 269be8b2907378adf72d7347cfa43ef230351a06Affected
  • 7ad4d237e7c4a5dcc71cf438f646744b4484f1da to before 7bb71133cae88d3003a3490b97864af76533072bAffected
  • 7ad4d237e7c4a5dcc71cf438f646744b4484f1da to before 1df793d479bef546569fc2e409ff8bb3f0fb8e99Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.56 through 5.15.*Not affected
  • 5.18.13 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.