CVE-2022-49104

low-risk
Published 2025-02-26

In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_core: handle NULL result of find_service_by_handle In case of an invalid handle the function find_servive_by_handle returns NULL. So take care of this and avoid a NULL pointer dereference.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (5)

Patch https://git.kernel.org/stable/c/04202f54dd8899e10f56a89c4c1ede0043fa22af
Patch https://git.kernel.org/stable/c/3b424f6586a870b8d657c5e5419465bbe0e7b61f
Patch https://git.kernel.org/stable/c/42f2142a337ee372455574809fc924580a7e51b2
Patch https://git.kernel.org/stable/c/aa0b7296785312a4bfa8fac0ba8ad78698fd9fcf
Patch https://git.kernel.org/stable/c/ca225857faf237234d2fffe5d1919467dfadd822
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal