CVE-2022-49104
kernel: staging: vchiq_core: handle NULL result of find_service_by_handle
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 26, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
staging: vchiq_core: handle NULL result of find_service_by_handle
In case of an invalid handle the function find_servive_by_handle returns NULL. So take care of this and avoid a NULL pointer dereference.
Statement
This vulnerability is rated as Moderate impact because an authenticated local user could cause a kernel crash resulting in a denial of service, while remote exploitation and confidentiality or integrity compromise are not possible. The flaw exists in the staging driver for Broadcom VideoCore services, which is not built or enabled in Red Hat Enterprise Linux kernels. Consequently, standard Red Hat enterprise installations do not ship the affected driver and remain unaffected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference