CVE-2022-49974 HID: nintendo: fix rumble worker null pointer deref
A null pointer dereference in the Linux kernel Nintendo HID driver allows local attackers to cause a denial of service by disconnecting the controller.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-49974?
CVE-2022-49974 is a high-severity vulnerability in Linux kernel, published on 18 Jun 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
HID: nintendo: fix rumble worker null pointer deref
We can dereference a null pointer trying to queue work to a destroyed workqueue.
If the device is disconnected, nintendo_hid_remove is called, in which the rumble_queue is destroyed. Avoid using that queue to defer rumble work once the controller state is set to JOYCON_CTLR_STATE_REMOVED.
This eliminates the null pointer dereference.
Weakness: CWE-476
Which versions are affected by CVE-2022-49974?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-49974?
Apply the vendor's patch.
Is CVE-2022-49974 being exploited?
There is no known exploitation of CVE-2022-49974 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2022-49974, GHSA-rrcr-75gv-j4qm, ROOT-OS-UBUNTU-2204-CVE-2022-49974, UBUNTU-CVE-2022-49974.