CVE-2022-49616

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-02-26 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt7*-sdw: harden jack_detect_handler Realtek headset codec drivers typically check if the card is instantiated before proceeding with the jack detection. The rt700, rt711 and rt711-sdca are however missing a check on the card pointer, which can lead to NULL dereferences encountered in driver bind/unbind tests.

Weakness Classification (1)

Affected Software (10)

VendorProductVersion
Linux Linux 320b8b0d13b81f3697acff5b6ddb47f88a09c118 < 07a606e1389a63b61cb8cd591026f30529117573
Linux Linux 320b8b0d13b81f3697acff5b6ddb47f88a09c118 < 1d75b73ec6d6b705cca528b36d8315e43e8d7fa5
Linux Linux 320b8b0d13b81f3697acff5b6ddb47f88a09c118 < 0484271ab0ce50649329fa9dc23c50853c5b26a4
Linux Linux 5.6
linux linux_kernel 5.6 – 5.15.56
linux linux_kernel 5.19
linux linux_kernel 5.19
linux linux_kernel 5.19
linux linux_kernel 5.19
linux linux_kernel 5.19

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.26%
Raw Score 0.002580
Percentile 17.6%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →