CVE-2022-49527

In the Linux kernel, the following vulnerability has been resolved:

media: venus: hfi: avoid null dereference in deinit

If venus_probe fails at pm_runtime_put_sync the error handling first calls hfi_destroy and afterwards hfi_core_deinit. As hfi_destroy sets core->ops to NULL, hfi_core_deinit cannot call the core_deinit function anymore.

Avoid this null pointer derefence by skipping the call when necessary.

This vulnerability is rated as Moderate severity because it requires local access to trigger a denial of service through a kernel null-pointer dereference during hardware initialization, without compromising system confidentiality or integrity. The issue specifically resides in the Qualcomm Venus video hardware driver, which is intended for Qualcomm Snapdragon SoCs and is not enabled or supported on standard Red Hat Enterprise Linux enterprise hardware configurations. Consequently, default Red Hat Enterprise Linux deployments are not affected, as the necessary driver and underlying physical hardware are absent.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.