CVE-2022-49483 drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit

Medium 5.5 Published 26 Feb 2025 Updated 11 May 2026

A null pointer dereference in the Linux kernel's DPU1 display driver can cause a system crash during initialization if the panel is not ready.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2022-49483?

CVE-2022-49483 is a medium-severity vulnerability in Linux kernel, published on 26 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit

If edp modeset init is failed due to panel being not ready and probe defers during drm bind, avoid clearing irqs and dereference hw_intr when hw_intr is null.

BUG: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000

Call trace: dpu_core_irq_uninstall+0x50/0xb0 dpu_irq_uninstall+0x18/0x24 msm_drm_uninit+0xd8/0x16c msm_drm_bind+0x580/0x5fc try_to_bring_up_master+0x168/0x1c0 __component_add+0xb4/0x178 component_add+0x1c/0x28 dp_display_probe+0x38c/0x400 platform_probe+0xb0/0xd0 really_probe+0xcc/0x2c8 __driver_probe_device+0xbc/0xe8 driver_probe_device+0x48/0xf0 __device_attach_driver+0xa0/0xc8 bus_for_each_drv+0x8c/0xd8 __device_attach+0xc4/0x150 device_initial_probe+0x1c/0x28

Changes in V2: - Update commit message and coreect fixes tag.

Patchwork: https://patchwork.freedesktop.org/patch/484430/

Weakness: CWE-476

Which versions are affected by CVE-2022-49483?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2022-49483?

Apply the vendor's patch.

Is CVE-2022-49483 being exploited?

There is no known exploitation of CVE-2022-49483 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as DEBIAN-CVE-2022-49483, GHSA-972p-cf2j-j59m, UBUNTU-CVE-2022-49483.