CVE-2022-49165

MEDIUM EPSS 14.9%

Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago

5.5 CVSS 3.1

Medium

Published Feb 26, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers If the application queues an NV12M jpeg as output buffer, but then queues a single planar capture buffer, the kernel will crash with "Unable to handle kernel NULL pointer dereference" in mxc_jpeg_addrs, prevent this by finishing the job with error.

CVSS Details

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

14.9% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 3

Vendor	Product	Version	Range
linux	linux_kernel	*	≥5.13 – <5.15.33
linux	linux_kernel	*	≥5.16 – <5.16.19
linux	linux_kernel	*	≥5.17 – <5.17.2

References 4

git.kernel.org https://git.kernel.org/stable/c/417591a766b3c040c346044541ff949c0b2bb7b2

Patch
git.kernel.org https://git.kernel.org/stable/c/4eb591c47c82a6a6ad293ed108c3cb77115fbc25

Patch
git.kernel.org https://git.kernel.org/stable/c/8d075ede7d24f19dc817c5bd517a53f0524f9031

Patch
git.kernel.org https://git.kernel.org/stable/c/eff76b180751e5e55c872d17755680c3b83ba9ab

Patch

Remediation

git.kernel.org https://git.kernel.org/stable/c/417591a766b3c040c346044541ff949c0b2bb7b2

Patch
git.kernel.org https://git.kernel.org/stable/c/4eb591c47c82a6a6ad293ed108c3cb77115fbc25

Patch
git.kernel.org https://git.kernel.org/stable/c/8d075ede7d24f19dc817c5bd517a53f0524f9031

Patch
git.kernel.org https://git.kernel.org/stable/c/eff76b180751e5e55c872d17755680c3b83ba9ab

Patch