CVE-2022-50556

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm: Fix potential null-ptr-deref due to drmm_mode_config_init()

drmm_mode_config_init() will call drm_mode_create_standard_properties()

and won't check the ret value. When drm_mode_create_standard_properties()

failed due to alloc, property will be a NULL pointer and may causes the

null-ptr-deref. Fix the null-ptr-deref by adding the ret value check.

Found null-ptr-deref while testing insert module bochs:

general protection fault, probably for non-canonical address

0xdffffc000000000c: 0000 [#1] SMP KASAN PTI

KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]

CPU: 3 PID: 249 Comm: modprobe Not tainted 6.1.0-rc1+ #364

Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS

rel-1.15.0-0-g2dd4b9b3f840-prebuilt.qemu.org 04/01/2014

RIP: 0010:drm_object_attach_property+0x73/0x3c0 [drm]

Call Trace:

<TASK>

__drm_connector_init+0xb6c/0x1100 [drm]

bochs_pci_probe.cold.11+0x4cb/0x7fe [bochs]

pci_

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References