CVE-2022-49104

MediumCVSS 5.5/10Last modified Aug 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: vchiq_core: handle NULL result of find_service_by_handle

In case of an invalid handle the function find_servive_by_handle returns NULL. So take care of this and avoid a NULL pointer dereference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 77b3f6c49105088f157672c6e16deb0154a1383b, < aa0b7296785312a4bfa8fac0ba8ad78698fd9fcf; >= 77b3f6c49105088f157672c6e16deb0154a1383b, < 42f2142a337ee372455574809fc924580a7e51b2; >= 77b3f6c49105088f157672c6e16deb0154a1383b, < 04202f54dd8899e10f56a89c4c1ede0043fa22af; >= 77b3f6c49105088f157672c6e16deb0154a1383b, < 3b424f6586a870b8d657c5e5419465bbe0e7b61f; >= 77b3f6c49105088f157672c6e16deb0154a1383b, < ca225857faf237234d2fffe5d1919467dfadd822
LinuxLinux5.9

References

Timeline

Published
Feb 26, 2025
Last modified
Aug 13, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-491055.5In the Linux kernel, the following vulnerability has been resolved: staging: wfx: fix an error handling in wfx_init_common() One error hanCVE-2022-491065.5In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instancCVE-2022-491075.5In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_readdir when note_last_dentry returns errCVE-2022-491085.5In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Fix memory leaks on probe Handle the error branches to CVE-2022-491095.5In the Linux kernel, the following vulnerability has been resolved: ceph: fix inode reference leakage in ceph_get_snapdir() The ceph_get_iCVE-2022-49116.5Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policyCVE-2022-491105.5In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revisit gc autotuning as of commit 4608fdfc07e1 CVE-2022-491118.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hci_send_acl This fixes the followingCVE-2022-491125.5In the Linux kernel, the following vulnerability has been resolved: mt76: fix monitor mode crash with sdio driver mt7921s driver may receiCVE-2022-491135.5In the Linux kernel, the following vulnerability has been resolved: powerpc/secvar: fix refcount leak in format_show() Refcount leak will CVE-2022-491148.8In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_releaseCVE-2022-491155.5In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix misused goto label Fix a misused goto label jump si
CVE-2022-49104: Medium severity, CVSS 5.5 | Vulnix