CVE-2022-48772
media: lgdt3306a: Add a check against null-pointer-def
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-def The driver should check whether the client provides the platform_data. The following log reveals it: [ 29.610324] BUG: KASAN: null-ptr-deref in kmemdup+0x30/0x40 [ 29.610730] Read of size 40 at addr 0000000000000000 by task bash/414 [ 29.612820] Call Trace: [ 29.613030] <TASK> [ 29.613201] dump_stack_lvl+0x56/0x6f [ 29.613496] ? kmemdup+0x30/0x40 [ 29.613754] print_report.cold+0x494/0x6b7 [ 29.614082] ? kmemdup+0x30/0x40 [ 29.614340] kasan_report+0x8a/0x190 [ 29.614628] ? kmemdup+0x30/0x40 [ 29.614888] kasan_check_range+0x14d/0x1d0 [ 29.615213] memcpy+0x20/0x60 [ 29.615454] kmemdup+0x30/0x40 [ 29.615700] lgdt3306a_probe+0x52/0x310 [ 29.616339] i2c_device_probe+0x951/0xa90
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.24% · top 85% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 4f75189024f4186a7ff9d56f4a8cb690774412ec – < 8915dcd29a82096acacf54364a8425363782aea0
- affected 4f75189024f4186a7ff9d56f4a8cb690774412ec – < b479fd59a1f4a342b69fce34f222d93bf791dca4
- affected 4f75189024f4186a7ff9d56f4a8cb690774412ec – < 526238d32c3acc3d597fd8c9a34652bfe9086cea
- affected 4f75189024f4186a7ff9d56f4a8cb690774412ec – < d082757b8359201c3864323cea4b91ea30a1e676
- affected 4f75189024f4186a7ff9d56f4a8cb690774412ec – < 7d12e918f2994c883f41f22552a61b9310fa1e87
- affected 4f75189024f4186a7ff9d56f4a8cb690774412ec – < 8e1e00718d0d9dd83337300572561e30b9c0d115
- affected 4f75189024f4186a7ff9d56f4a8cb690774412ec – < c1115ddbda9c930fba0fdd062e7a8873ebaf898d
- affected 4.11
- unaffected < 4.11
- unaffected 5.4.278 – ≤ 5.4.*
- unaffected 5.10.219 – ≤ 5.10.*
- unaffected 5.15.161 – ≤ 5.15.*
- unaffected 6.1.94 – ≤ 6.1.*
- unaffected 6.6.34 – ≤ 6.6.*
- unaffected 6.9.5 – ≤ 6.9.*
- unaffected 6.10 – ≤ *
References (7)
- https://git.kernel.org/stable/c/8915dcd29a82096acacf54364a8425363782aea0 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/b479fd59a1f4a342b69fce34f222d93bf791dca4 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/526238d32c3acc3d597fd8c9a34652bfe9086cea (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/d082757b8359201c3864323cea4b91ea30a1e676 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/7d12e918f2994c883f41f22552a61b9310fa1e87 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/8e1e00718d0d9dd83337300572561e30b9c0d115 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/c1115ddbda9c930fba0fdd062e7a8873ebaf898d (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-48772)Record last updated .