NetSight
IP …
medium5.5

CVE-2022-50181

In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: fix a missing check to avoid NULL dereference 'cache_ent' could be set NULL ins…

Impact

In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: fix a missing check to avoid NULL dereference 'cache_ent' could be set NULL inside virtio_gpu_cmd_get_capset() and it will lead to a NULL dereference by a lately use of it (i.e., ptr = cache_ent->caps_cache). Fix it with a NULL check. [ kraxel: minor codestyle fixup ]

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.4 before 5.10.137
from 5.11 before 5.15.61
from 5.16 before 5.18.18
from 5.19 before 5.19.2

Weakness classification

CWE-476

References