CVE-2022-49616

MEDIUM EPSS 14.6%
Published Feb 26, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt7*-sdw: harden jack_detect_handler Realtek headset codec drivers typically check if the card is instantiated before proceeding with the jack detection. The rt700, rt711 and rt711-sdca are however missing a check on the card pointer, which can lead to NULL dereferences encountered in driver bind/unbind tests.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
14.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥5.6  –  <5.15.56
linuxlinux_kernel*≥5.16  –  <5.18.13
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/0484271ab0ce50649329fa9dc23c50853c5b26a4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/07a606e1389a63b61cb8cd591026f30529117573
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1d75b73ec6d6b705cca528b36d8315e43e8d7fa5
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0484271ab0ce50649329fa9dc23c50853c5b26a4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/07a606e1389a63b61cb8cd591026f30529117573
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1d75b73ec6d6b705cca528b36d8315e43e8d7fa5
    Patch