Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-50556— drm: Fix potential null-ptr-deref due to drmm_mode_config_init()

AI Predicted 5.5 Difficulty: Moderate EPSS 0.20% · P10

Affected Version Matrix 12

VendorProductVersion RangeStatus
LinuxLinux6b4959f43a04e12d39c5700607727f2cbcfeac31< 5ae70041a6d7de62a0cdb2bbcfe0c9cf753035d0affected
6b4959f43a04e12d39c5700607727f2cbcfeac31< d06e827a65a6bcd2e329045d891d0739cec1cf4aaffected
6b4959f43a04e12d39c5700607727f2cbcfeac31< b14147464251f66e38fa39f0aae9780466db8610affected
6b4959f43a04e12d39c5700607727f2cbcfeac31< 961620ad67611a7320a49f4b6f3c5e2906833a03affected
6b4959f43a04e12d39c5700607727f2cbcfeac31< 834c23e4f798dcdc8af251b3c428ceef94741991affected
4.0affected
< 4.0unaffected
5.10.173≤ 5.10.*unaffected
… +4 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-50556

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm: Fix potential null-ptr-deref due to drmm_mode_config_init() drmm_mode_config_init() will call drm_mode_create_standard_properties() and won't check the ret value. When drm_mode_create_standard_properties() failed due to alloc, property will be a NULL pointer and may causes the null-ptr-deref. Fix the null-ptr-deref by adding the ret value check. Found null-ptr-deref while testing insert module bochs: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] CPU: 3 PID: 249 Comm: modprobe Not tainted 6.1.0-rc1+ #364 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.15.0-0-g2dd4b9b3f840-prebuilt.qemu.org 04/01/2014 RIP: 0010:drm_object_attach_property+0x73/0x3c0 [drm] Call Trace: <TASK> __drm_connector_init+0xb6c/0x1100 [drm] bochs_pci_probe.cold.11+0x4cb/0x7fe [bochs] pci_device_probe+0x17d/0x340 really_probe+0x1db/0x5d0 __driver_probe_device+0x1e7/0x250 driver_probe_device+0x4a/0x120 __driver_attach+0xcd/0x2c0 bus_for_each_dev+0x11a/0x1b0 bus_add_driver+0x3d7/0x500 driver_register+0x18e/0x320 do_one_initcall+0xc4/0x3e0 do_init_module+0x1b4/0x630 load_module+0x5dca/0x7230 __do_sys_finit_module+0x100/0x170 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff65af9f839
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未检查drmm_mode_config_init返回值，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 6b4959f43a04e12d39c5700607727f2cbcfeac31 ~ 5ae70041a6d7de62a0cdb2bbcfe0c9cf753035d0 -
LinuxLinux 4.0 -

II. Public POCs for CVE-2022-50556

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-50556

请登录查看更多情报信息。

Patches & Fixes for CVE-2022-50556 (5)

Same Patch Batch · Linux · 2025-10-22 · 67 CVEs total

CVE-2023-537118.2 HIGHNFS: Fix a potential data corruption
CVE-2023-537058.2 HIGHipv6: Fix out-of-bounds access in ipv6_find_tlv()
CVE-2023-536987.8 HIGHxsk: fix refcount underflow in error path
CVE-2023-536927.8 HIGHext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
CVE-2023-537187.8 HIGHring-buffer: Do not swap cpu_buffer during resize process
CVE-2022-505697.8 HIGHxfrm: Update ipcomp_scratches with NULL when freed
CVE-2022-505707.8 HIGHplatform/chrome: fix memory corruption in ioctl
CVE-2022-505677.8 HIGHfs: jfs: fix shift-out-of-bounds in dbAllocAG
CVE-2023-536957.8 HIGHudf: Detect system inodes linked into directory hierarchy
CVE-2023-537077.8 HIGHdrm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
CVE-2022-505817.8 HIGHhfs: fix OOB Read in __hfs_brec_find
CVE-2023-537297.8 HIGHsoc: qcom: qmi_encdec: Restrict string length in decode
CVE-2023-537137.8 HIGHarm64: sme: Use STR P to clear FFR context field in streaming SVE mode
CVE-2023-537267.1 HIGHarm64: csum: Fix OoB access in IP checksum code for negative lengths
CVE-2023-53704clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
CVE-2023-53706mm/vmemmap/devdax: fix kernel crash when probing devdax devices
CVE-2023-53714drm/stm: ltdc: fix late dereference check
CVE-2023-53708ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
CVE-2023-53712ARM: 9317/1: kexec: Make smp stop calls asynchronous
CVE-2023-53719serial: arc_uart: fix of_iomap leak in `arc_serial_probe`

Showing top 20 of 67 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2022-50556

No comments yet

Leave a comment