PT-2025-7999 · Linux+3 · Linux Kernel+3

Published 2022-03-17 · Updated 2025-05-22 · CVE-2022-49071

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the drm/panel component, related to the ili9341 module. The issue arises when the optional regulator lookup fails, and the pointer is not properly reset to NULL. This can lead to a situation where other functions, such as mipi dbi poweron reset conditional(), will dereference an error pointer, as they only perform a NULL pointer check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-06042

CVE-2022-49071

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1311

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49071.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://git.kernel.org/stable/c/d14eb80e27795b7b20060f7b151cdfe39722a813 · Patch
• https://git.kernel.org/stable/c/28dc1503a9d36654f9c61adb2915682515a30f71 · Patch
• https://ubuntu.com/security/CVE-2022-49071 · Vendor Advisory
• https://git.kernel.org/stable/c/e3d982c111a6c033671dd6084b07f62fbf50f76f · Patch
• https://bdu.fstec.ru/vul/2025-06042 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49071 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory