PT-2025-8160 · Linux+2 · Linux Kernel+2

Zhou Qingyang · Published 2025-02-26 · Updated 2025-05-20 · CVE-2022-49232

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue was found in the Linux kernel, specifically in the amdgpu dm connector add common modes() function. This issue occurs when amdgpu dm create common mode() fails, causing a NULL pointer to be passed to drm mode probed add(), which then attempts to dereference it. This could lead to a NULL pointer dereference. The issue was discovered by a static analyzer.

Recommendations To resolve this issue, apply the fix that adds a NULL check for the mode variable in the amdgpu dm connector add common modes() function.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49232

OESA-2025-1465

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:01600-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1502

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49232.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://git.kernel.org/stable/c/57f4ad5e286fe4599c8fc63cf89f85f9eec7f9c9 · Patch
• https://git.kernel.org/stable/c/639b3b9def0a6a3f316a195d705d14113236e89c · Patch
• https://ubuntu.com/security/CVE-2022-49232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47670 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49084 · Security Note
• https://git.kernel.org/stable/c/bdc7429708a0772d90c208975694f7c2133b1202 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49429 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53023 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01600-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49626 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49232 · Security Note