CVE-2022-49221

drm/msm/dp: populate connector of struct dp_panel

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: populate connector of struct dp_panel DP CTS test case 4.2.2.6 has valid edid with bad checksum on purpose and expect DP source return correct checksum. During drm edid read, correct edid checksum is calculated and stored at connector::real_edid_checksum. The problem is struct dp_panel::connector never be assigned, instead the connector is stored in struct msm_dp::connector. When we run compliance testing test case 4.2.2.6 dp_panel_handle_sink_request() won't have a valid edid set in struct dp_panel::edid so we'll try to use the connectors real_edid_checksum and hit a NULL pointer dereference error because the connector pointer is never assigned. Changes in V2: -- populate panel connector at msm_dp_modeset_init() instead of at dp_panel_read_sink_caps() Changes in V3: -- remove unhelpful kernel crash trace commit text -- remove renaming dp_display parameter to dp Changes in V4: -- add more details to commit text Changes in v10: -- group into one series Changes in v11: -- drop drm/msm/dp: dp_link_parse_sink_count() return immediately if aux read Signee-off-by: Kuogee Hsieh <quic_khsieh@quicinc.com>

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.02%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/413c62697b61226a236c8b1f5cd64dcf42bcc12f patch
https://git.kernel.org/stable/c/9525b8bcae8b99188990b56484799cf4b1b43786 patch
https://git.kernel.org/stable/c/fbba600f432a360b42452fee79d1fb35d3aa8aeb patch
https://git.kernel.org/stable/c/104074ebc0c3f358dd1ee944fbcde92c6e5a21dd patch
https://git.kernel.org/stable/c/5e602f5156910c7b19661699896cb6e3fb94fab9 patch

Frequently Asked Questions

What is the severity of CVE-2022-49221?
CVE-2022-49221 has been scored as a medium severity vulnerability.
How to fix CVE-2022-49221?
To fix CVE-2022-49221, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49221 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2022-49221 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49221?
CVE-2022-49221 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.