In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix a possible null pointer dereference In radeon_fp_native_mode(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd. The failure status of drm_cvt_mode() on the other path is checked too.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/140d9807b96e1303f6f2675a7ae8710a2094bd17 cve-icon cve-icon
https://git.kernel.org/stable/c/16a0f0b63c4c7eb46fc4c3f00bf2836e6ee46a9f cve-icon cve-icon
https://git.kernel.org/stable/c/28fd384c78d7d8ed8af0d086d778c3e438ba7f60 cve-icon cve-icon
https://git.kernel.org/stable/c/7b7fba107b2c4ec7673d0f45bdbb9d1af697d9b9 cve-icon cve-icon
https://git.kernel.org/stable/c/8a89bfeef9abe93371e3ea8796377f2d132eee29 cve-icon cve-icon
https://git.kernel.org/stable/c/a2b28708b645c5632dc93669ab06e97874c8244f cve-icon cve-icon
https://git.kernel.org/stable/c/b33f7d99c9226892c7794dc2500fae35966020c9 cve-icon cve-icon
https://git.kernel.org/stable/c/e938d24f0b7392e142b8aa434f18590d99dbe479 cve-icon cve-icon
https://git.kernel.org/stable/c/fee8ae0a0bb66eb7730c22f44fbd7203f63c2eab cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052143-CVE-2022-48710-aa43@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48710 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48710 cve-icon
History

Tue, 31 Dec 2024 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Tue, 05 Nov 2024 08:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:30:37.579Z

Updated: 2024-12-19T08:06:02.862Z

Reserved: 2024-05-03T14:55:07.148Z

Link: CVE-2022-48710

cve-icon Vulnrichment

Updated: 2024-08-03T15:17:55.832Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T16:15:12.393

Modified: 2024-12-31T20:09:11.503

Link: CVE-2022-48710

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2022-48710 - Bugzilla