What’s Vulnerable › Vulnerabilities

CVE-2022-49106: staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-10-30
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances vchiq_get_state() can return a NULL pointer. So handle this cases and avoid a NULL pointer derefence in vchiq_dump_platform_instances.

Affected products

• Linux kernel: before 5.15.34; from 5.16 before 5.16.20; from 5.17 before 5.17.3 — fixed in 5.15.34, 5.16.20, 5.17.3
• Linux: 4.9 — fixed in 5.18

How to fix

Upgrade to a fixed version: Linux kernel 5.15.34, 5.16.20, 5.17.3; Linux 5.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/176df12b38c70b0a45e6392a0ee5bc83489dfc29
• https://git.kernel.org/stable/c/2eaeb83153b848923a0b121402b4be88223ca62e
• https://git.kernel.org/stable/c/4627250cabaa80278d3ab01ad107893cea83799f
• https://git.kernel.org/stable/c/51e5e5c34c22c0bfec0808d8c33e0b2fcf4c7c89
• https://git.kernel.org/stable/c/aa899e686d442c63d50f4d369cc02dbbf0941cb0

Get alerted when CVE-2022-49106 or the next vulnerability affects your stack