What’s Vulnerable › Vulnerabilities

CVE-2022-49495: drm/msm/hdmi: check return value after calling platform_get_resource_byname()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: check return value after calling platform_get_resource_byname() It will cause null-ptr-deref if platform_get_resource_byname() returns NULL, we need check the return value. Patchwork: https://patchwork.freedesktop.org/patch/482992/

Affected products

• Linux kernel: from 4.3 before 4.9.318; from 4.10 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.121; from 5.11 before 5.15.46 — fixed in 4.14.283, 4.19.247, 4.9.318, 5.10.121, 5.15.46, 5.17.14

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 4.9.318, 5.10.121. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0978fcce91b90b561b8c82e7c492ba9fc8440eef
• https://git.kernel.org/stable/c/2b3ed7547b1a052209da6c4ab886ffe0eed88c42
• https://git.kernel.org/stable/c/4cd66a8016b872a153bf892fe4258cbc0dacf5b1
• https://git.kernel.org/stable/c/6369dda4a2209142ab819f01d3d2076d81e3ebdd
• https://git.kernel.org/stable/c/9cb1ee33efccb8b107ee04b7b3441820de3fd2da
• https://git.kernel.org/stable/c/9f5495a5c51c1d11c6ffc13aa2befffec0c2651a
• https://git.kernel.org/stable/c/a36e506711548df923ceb7ec9f6001375be799a5
• https://git.kernel.org/stable/c/c1bfacf0daf25a5fc7d667399d6ff2dffda84cd8
• https://git.kernel.org/stable/c/d9cb951d11a4ace4de5c50b1178ad211de17079e

Get alerted when CVE-2022-49495 or the next vulnerability affects your stack