CVE-2022-49232

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()

In amdgpu_dm_connector_add_common_modes(), amdgpu_dm_create_common_mode() is assigned to mode and is passed to drm_mode_probed_add() directly after that. drm_mode_probed_add() passes &mode->head to list_add_tail(), and there is a dereference of it in list_add_tail() without recoveries, which could lead to NULL pointer dereference on failure of amdgpu_dm_create_common_mode().

Fix this by adding a NULL check of mode.

This bug was found by a static analyzer.

Builds with 'make allyesconfig' show no new warnings, and our static analyzer no longer warns about this code.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe7b07ceef2a650e5ed8ca37997689e086c680daf < 2c729dec8c1e3e2892fde5ce8181553860914e74affected
LinuxLinuxe7b07ceef2a650e5ed8ca37997689e086c680daf < 57f4ad5e286fe4599c8fc63cf89f85f9eec7f9c9affected
LinuxLinuxe7b07ceef2a650e5ed8ca37997689e086c680daf < 19a7eba284790cfbba2945deb2363cf03ce41648affected
LinuxLinuxe7b07ceef2a650e5ed8ca37997689e086c680daf < bdc7429708a0772d90c208975694f7c2133b1202affected
LinuxLinuxe7b07ceef2a650e5ed8ca37997689e086c680daf < f4eaa999fec78dec2a9c2d797438e05cbffb125baffected
LinuxLinuxe7b07ceef2a650e5ed8ca37997689e086c680daf < 639b3b9def0a6a3f316a195d705d14113236e89caffected
LinuxLinuxe7b07ceef2a650e5ed8ca37997689e086c680daf < 588a70177df3b1777484267584ef38ab2ca899a2affected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux4.19.238 <= 4.19.*unaffected
LinuxLinux5.4.189 <= 5.4.*unaffected
LinuxLinux5.10.110 <= 5.10.*unaffected
LinuxLinux5.15.33 <= 5.15.*unaffected
LinuxLinux5.16.19 <= 5.16.*unaffected
LinuxLinux5.17.2 <= 5.17.*unaffected
LinuxLinux5.18 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References