What’s Vulnerable › Vulnerabilities

CVE-2022-48718: drm: mxsfb: Fix NULL pointer dereference

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-20 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereference the NULL pointer which drm_atomic_get_new_bridge_state is allowed to return. Assume a fixed format instead.

Affected products

• Linux kernel: from 5.15 before 5.15.27; from 5.16 before 5.16.8; 5.17-rc1, 5.17-rc2 — fixed in 5.15.27, 5.16.8

How to fix

Upgrade to a fixed version: Linux kernel 5.15.27, 5.16.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/622c9a3a7868e1eeca39c55305ca3ebec4742b64
• https://git.kernel.org/stable/c/6f9267e01cca749137349d8ffb0d0ebbadf567f4
• https://git.kernel.org/stable/c/86a337bb803040e4401b87c974a7fb92efe3d0e1
• https://git.kernel.org/stable/c/622c9a3a7868e1eeca39c55305ca3ebec4742b64
• https://git.kernel.org/stable/c/6f9267e01cca749137349d8ffb0d0ebbadf567f4
• https://git.kernel.org/stable/c/86a337bb803040e4401b87c974a7fb92efe3d0e1

Get alerted when CVE-2022-48718 or the next vulnerability affects your stack