CVE-2022-49615

Summary

CVE-2022-49615 is a kernel vulnerability affecting the Linux operating system. In the Asymmetric Simple Courtesy (ASoC) subsystem, specifically the rt711-sdca driver, a NULL pointer dereference issue has been identified. This occurs when initial settings are written before the codec probe function, and the rt711->component variable hasn't been assigned yet. If an IO error happens during these initial settings operations, the kernel will panic. To resolve this vulnerability, the patch modifies the component variable to point to slave->dev instead.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.