github - ghsa-78f2-hq34-889m

ghsa-78f2-hq34-889m

Vulnerability from github

Published

2025-12-30 15:30

Modified

2025-12-30 15:30

Details

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe

During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channel and causes NULL pointer dereference. Initializing the AUX channel earlier to prevent such error.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-50847"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-30T13:15:59Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe\n\nDuring device boot, the HPD interrupt could be triggered before the DRM\nsubsystem registers it6505 as a DRM bridge. In such cases, the driver\ntries to access AUX channel and causes NULL pointer dereference.\nInitializing the AUX channel earlier to prevent such error.",
  "id": "GHSA-78f2-hq34-889m",
  "modified": "2025-12-30T15:30:28Z",
  "published": "2025-12-30T15:30:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50847"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/172d4d64075075f955e6e416915e3f287eec514a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8ed8505803774fc3f36a432718036c21cc51e2ba"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e577d4b13064c337b83fe7edecb3f34e87144821"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2022-50847 (GCVE-0-2022-50847)

Vulnerability from cvelistv5

Published

2025-12-30 12:11

Modified

2025-12-30 12:11

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channel and causes NULL pointer dereference. Initializing the AUX channel earlier to prevent such error.

References

URL

Tags

	https://git.kernel.org/stable/c/8ed8505803774fc3f36a432718036c21cc51e2ba
	https://git.kernel.org/stable/c/172d4d64075075f955e6e416915e3f287eec514a
	https://git.kernel.org/stable/c/e577d4b13064c337b83fe7edecb3f34e87144821

Impacted products

Vendor

Product

Version

Version: b5c84a9edcd418cd055becad6a22439e7c5e3bf8
Version: b5c84a9edcd418cd055becad6a22439e7c5e3bf8
Version: b5c84a9edcd418cd055becad6a22439e7c5e3bf8

Version: 5.18

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/bridge/ite-it6505.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8ed8505803774fc3f36a432718036c21cc51e2ba",
              "status": "affected",
              "version": "b5c84a9edcd418cd055becad6a22439e7c5e3bf8",
              "versionType": "git"
            },
            {
              "lessThan": "172d4d64075075f955e6e416915e3f287eec514a",
              "status": "affected",
              "version": "b5c84a9edcd418cd055becad6a22439e7c5e3bf8",
              "versionType": "git"
            },
            {
              "lessThan": "e577d4b13064c337b83fe7edecb3f34e87144821",
              "status": "affected",
              "version": "b5c84a9edcd418cd055becad6a22439e7c5e3bf8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/bridge/ite-it6505.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.18"
            },
            {
              "lessThan": "5.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.16",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.2",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe\n\nDuring device boot, the HPD interrupt could be triggered before the DRM\nsubsystem registers it6505 as a DRM bridge. In such cases, the driver\ntries to access AUX channel and causes NULL pointer dereference.\nInitializing the AUX channel earlier to prevent such error."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-30T12:11:03.949Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8ed8505803774fc3f36a432718036c21cc51e2ba"
        },
        {
          "url": "https://git.kernel.org/stable/c/172d4d64075075f955e6e416915e3f287eec514a"
        },
        {
          "url": "https://git.kernel.org/stable/c/e577d4b13064c337b83fe7edecb3f34e87144821"
        }
      ],
      "title": "drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50847",
    "datePublished": "2025-12-30T12:11:03.949Z",
    "dateReserved": "2025-12-30T12:06:07.134Z",
    "dateUpdated": "2025-12-30T12:11:03.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.