CVE-2022-49532

Summary

CVE-2022-49532 is a vulnerability in the Linux kernel affecting the virtio GPU driver. The issue involves a NULL pointer dereference in the function 'virtio_gpu_conn_get_modes'. This vulnerability was discovered using syzkaller, a kernel fuzzer, and can result in a kernel crash or potentially allow an attacker to execute arbitrary code. The issue is caused by the function 'drm_cvt_mode' returning a NULL pointer, which is not properly checked. The vulnerability can be exploited through a crafted input to the drm_ioctl kernel call, leading to potential security risks. This vulnerability has been resolved in recent Linux kernel updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.