CVE-2022-49616 ASoC: rt7*-sdw: harden jack_detect_handler
A missing pointer check in Realtek headset codec drivers can cause a null dereference, leading to a system crash during driver bind or unbind operations.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-49616?
CVE-2022-49616 is a medium-severity vulnerability in Linux kernel, published on 26 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: rt7*-sdw: harden jack_detect_handler
Realtek headset codec drivers typically check if the card is instantiated before proceeding with the jack detection.
The rt700, rt711 and rt711-sdca are however missing a check on the card pointer, which can lead to NULL dereferences encountered in driver bind/unbind tests.
Weakness: CWE-476
Which versions are affected by CVE-2022-49616?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-49616?
Apply the vendor's patch.
Is CVE-2022-49616 being exploited?
There is no known exploitation of CVE-2022-49616 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2022-49616, GHSA-cvgm-m469-rvv5, ROOT-OS-DEBIAN-11-CVE-2022-49616, UBUNTU-CVE-2022-49616.