CVE-2022-49125

Summary

CVE-2022-49125 is a vulnerability affecting the Linux kernel that has been addressed. The issue involved a potential NULL dereference in the 'drm' subsystem. Specifically, in the 'sprd_drm_shutdown' function, 'drm' could be null, leading to a dereference of 'drm_warn' which could result in a warning log being removed inadvertently. To mitigate this risk, the patch removes the warning log and instead uses 'dev_warn()'. Additionally, the patch splitting the checking of 'platform_get_resource()' return value into a separate patch has been implemented as part of the solution.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.