CVE Database›Document archive›CVE-2022-49104

CVE-2022-49104

kernel: staging: vchiq_core: handle NULL result of find_service_by_handle

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · February 26, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: vchiq_core: handle NULL result of find_service_by_handle

In case of an invalid handle the function find_servive_by_handle returns NULL. So take care of this and avoid a NULL pointer dereference.

Statement

This vulnerability is rated as Moderate impact because an authenticated local user could cause a kernel crash resulting in a denial of service, while remote exploitation and confidentiality or integrity compromise are not possible. The flaw exists in the staging driver for Broadcom VideoCore services, which is not built or enabled in Red Hat Enterprise Linux kernels. Consequently, standard Red Hat enterprise installations do not ship the affected driver and remain unaffected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference