What’s Vulnerable › Vulnerabilities

CVE-2022-49491: drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() It will cause null-ptr-deref in resource_size(), if platform_get_resource() returns NULL, move calling resource_size() after devm_ioremap_resource() that will check 'res' to avoid null-ptr-deref.

Affected products

• Linux kernel: from 3.19 before 4.9.318; from 4.10 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.121; from 5.11 before 5.15.46 — fixed in 4.14.283, 4.19.247, 4.9.318, 5.10.121, 5.15.46, 5.17.14

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 4.9.318, 5.10.121. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3451852312303d54a003c73bd0ae39cebb960bd5
• https://git.kernel.org/stable/c/452922955df215a417c80d09dab72bbc667a1861
• https://git.kernel.org/stable/c/6ff986e057bf28e2f7690dad410768b2270f9453
• https://git.kernel.org/stable/c/769c53bb6116d0eaec0f1fe4ec4b27a74465cad1
• https://git.kernel.org/stable/c/a9b4599665e437de8a1152799c34841b799a2e1c
• https://git.kernel.org/stable/c/b54926bd558d97c888c3d2d87886f3c159d3254a
• https://git.kernel.org/stable/c/ecfa52654d0c9c333c1fe1611f47105f6bce9591
• https://git.kernel.org/stable/c/f8c242908ad15bbd604d3bcb54961b7d454c43f8
• https://git.kernel.org/stable/c/fcd6a886443730c39170b8383411e52118aec0a3

Get alerted when CVE-2022-49491 or the next vulnerability affects your stack