CVE-2022-49106

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-02-26 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances vchiq_get_state() can return a NULL pointer. So handle this cases and avoid a NULL pointer derefence in vchiq_dump_platform_instances.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
Linux Linux 71bad7f086419dc674244b91ca35a12bfa4cb597 < 2eaeb83153b848923a0b121402b4be88223ca62e
Linux Linux 71bad7f086419dc674244b91ca35a12bfa4cb597 < 176df12b38c70b0a45e6392a0ee5bc83489dfc29
Linux Linux 71bad7f086419dc674244b91ca35a12bfa4cb597 < 4627250cabaa80278d3ab01ad107893cea83799f
Linux Linux 71bad7f086419dc674244b91ca35a12bfa4cb597 < 51e5e5c34c22c0bfec0808d8c33e0b2fcf4c7c89
Linux Linux 71bad7f086419dc674244b91ca35a12bfa4cb597 < aa899e686d442c63d50f4d369cc02dbbf0941cb0
Linux Linux 4.9
linux linux_kernel < 5.15.34

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.24%
Raw Score 0.002430
Percentile 15.5%
Date 2026-11-02

EPSS Trend

2026-11-02
0.00243
2026-11-01
0.00243
2026-10-31
0.00243
2026-10-30
0.00243
2026-10-29
0.00243

Intelligence Sources

mitre ref →
nvd ref →