PT-2025-8149 · Linux+2 · Linux Kernel+2

Kuogee Hsieh · Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49221

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where the dp panel struct's connector is not assigned, leading to a NULL pointer dereference error. This occurs because the connector is stored in msm dp instead, and when running compliance testing, the dp panel handle sink request() function attempts to use the connector's real edid checksum without a valid edid set. The problem arises during the DP CTS test case 4.2.2.6, where a valid EDID with a bad checksum is used, and the DP source is expected to return the correct checksum.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49221

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1329

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49221.json · Exploit
• https://git.kernel.org/stable/c/413c62697b61226a236c8b1f5cd64dcf42bcc12f · Patch
• https://git.kernel.org/stable/c/5e602f5156910c7b19661699896cb6e3fb94fab9 · Patch
• https://git.kernel.org/stable/c/104074ebc0c3f358dd1ee944fbcde92c6e5a21dd · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49221 · Vendor Advisory
• https://git.kernel.org/stable/c/9525b8bcae8b99188990b56484799cf4b1b43786 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49221 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49221 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49221 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49221 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49221 · Vendor Advisory