CVE-2022-49506

MEDIUM

Linux Kernel 5.12-5.14 - NULL Pointer Dereference in mtk_disp_ovl_irq_handler

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add vblank register/unregister callback functions We encountered a kernel panic issue that callback data will be NULL when it's using in ovl irq handler. There is a timing issue between mtk_disp_ovl_irq_handler() and mtk_ovl_disable_vblank(). To resolve this issue, we use the flow to register/unregister vblank cb: - Register callback function and callback data when crtc creates. - Unregister callback function and callback data when crtc destroies. With this solution, we can assure callback data will not be NULL when vblank is disable.

Scores

CVSS v3 5.5
EPSS 0.0026
EPSS Percentile 17.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (14)
linux/Kernel 5.12.0 - 5.15.54linux
linux/Kernel 5.16.0 - 5.17.14linux
linux/Kernel 5.18.0 - 5.18.3linux
Linux/Linux < 5.12
Linux/Linux 5.12
Linux/Linux 5.15.54 - 5.15.*
Linux/Linux 5.17.14 - 5.17.*
Linux/Linux 5.18.3 - 5.18.*
Linux/Linux 5.19
Linux/Linux 9b0704988b151824a51133dc4c921f4273c5d839 - 3a4027b5971fe2a94e32754f007d9d3c12c68ad1
... and 4 more
Published Feb 26, 2025
Tracked Since Feb 18, 2026