CVE-2022-49527

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 476

Summary

CVE-2022-49527 is a vulnerability affecting the Linux kernel that has been addressed. In the "venus: hfi" driver, a null dereference issue was identified. When the "venus_probe" function fails during "pm_runtime_put_sync," it calls "hfi_destroy," which sets the core's operations to NULL. As a result, "hfi_core_deinit" cannot use the core_deinit function, leading to a null pointer dereference. This issue has been mitigated by skipping the "hfi_core_deinit" call when necessary.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share