CVE-2022-48718 - drm: mxsfb: Fix NULL pointer dereference

MEDIUM

drm: mxsfb: Fix NULL pointer dereference

Published Jun 20, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.21%

mxsfb should not ever dereference the NULL pointer which drm_atomic_get_new_bridge_state is allowed to return. Assume a fixed format instead.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-48718		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2293284		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53597		Advisory
https://git.kernel.org/stable/c/622c9a3a7868e1eeca39c55305ca3ebec4742b64		Patch
https://git.kernel.org/stable/c/6f9267e01cca749137349d8ffb0d0ebbadf567f4		Patch
https://git.kernel.org/stable/c/86a337bb803040e4401b87c974a7fb92efe3d0e1		Patch
https://lore.kernel.org/linux-cve-announce/2024062056-CVE-2022-48718-1d94@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48718
https://www.cve.org/CVERecord?id=CVE-2022-48718