CVE-2022-49974

In the Linux kernel, the following vulnerability has been resolved:

HID: nintendo: fix rumble worker null pointer deref

We can dereference a null pointer trying to queue work to a destroyed workqueue.

If the device is disconnected, nintendo_hid_remove is called, in which the rumble_queue is destroyed. Avoid using that queue to defer rumble work once the controller state is set to JOYCON_CTLR_STATE_REMOVED.

This eliminates the null pointer dereference.

This vulnerability is rated as Moderate impact because exploitation requires local access and the presence of specialized Nintendo controller hardware. In typical Red Hat Enterprise Linux enterprise environments, such gaming devices are rarely deployed, significantly reducing real-world exposure unless physical access or virtualized device emulation is available. An attacker with appropriate privileges or local device access could trigger this flaw when disconnecting a device, causing a kernel crash and resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.