{"id":"CVE-2022-48772","state":"PUBLISHED","title":"media: lgdt3306a: Add a check against null-pointer-def","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: lgdt3306a: Add a check against null-pointer-def\n\nThe driver should check whether the client provides the platform_data.\n\nThe following log reveals it:\n\n[   29.610324] BUG: KASAN: null-ptr-deref in kmemdup+0x30/0x40\n[   29.610730] Read of size 40 at addr 0000000000000000 by task bash/414\n[   29.612820] Call Trace:\n[   29.613030]  <TASK>\n[   29.613201]  dump_stack_lvl+0x56/0x6f\n[   29.613496]  ? kmemdup+0x30/0x40\n[   29.613754]  print_report.cold+0x494/0x6b7\n[   29.614082]  ? kmemdup+0x30/0x40\n[   29.614340]  kasan_report+0x8a/0x190\n[   29.614628]  ? kmemdup+0x30/0x40\n[   29.614888]  kasan_check_range+0x14d/0x1d0\n[   29.615213]  memcpy+0x20/0x60\n[   29.615454]  kmemdup+0x30/0x40\n[   29.615700]  lgdt3306a_probe+0x52/0x310\n[   29.616339]  i2c_device_probe+0x951/0xa90","publishedAt":"2024-06-25T14:22:34.892Z","updatedAt":"2026-05-11T18:46:38.238Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"8915dcd29a82096acacf54364a8425363782aea0","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"b479fd59a1f4a342b69fce34f222d93bf791dca4","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"526238d32c3acc3d597fd8c9a34652bfe9086cea","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"d082757b8359201c3864323cea4b91ea30a1e676","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"7d12e918f2994c883f41f22552a61b9310fa1e87","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"8e1e00718d0d9dd83337300572561e30b9c0d115","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"c1115ddbda9c930fba0fdd062e7a8873ebaf898d","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/dvb-frontends/lgdt3306a.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.11","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.11","versionType":"semver"},{"version":"5.4.278","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.219","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.161","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.94","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.34","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.9.5","status":"unaffected","lessThanOrEqual":"6.9.*","versionType":"semver"},{"version":"6.10","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/dvb-frontends/lgdt3306a.c"]}],"references":["https://git.kernel.org/stable/c/8915dcd29a82096acacf54364a8425363782aea0","https://git.kernel.org/stable/c/b479fd59a1f4a342b69fce34f222d93bf791dca4","https://git.kernel.org/stable/c/526238d32c3acc3d597fd8c9a34652bfe9086cea","https://git.kernel.org/stable/c/d082757b8359201c3864323cea4b91ea30a1e676","https://git.kernel.org/stable/c/7d12e918f2994c883f41f22552a61b9310fa1e87","https://git.kernel.org/stable/c/8e1e00718d0d9dd83337300572561e30b9c0d115","https://git.kernel.org/stable/c/c1115ddbda9c930fba0fdd062e7a8873ebaf898d"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/48xxx/CVE-2022-48772.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-48772","state":"PUBLISHED","datePublished":"2024-06-25T14:22:34.892Z","dateUpdated":"2026-05-11T18:46:38.238Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-06-20T11:09:39.061Z"},"containers":{"cna":{"title":"media: lgdt3306a: Add a check against null-pointer-def","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: lgdt3306a: Add a check against null-pointer-def\n\nThe driver should check whether the client provides the platform_data.\n\nThe following log reveals it:\n\n[   29.610324] BUG: KASAN: null-ptr-deref in kmemdup+0x30/0x40\n[   29.610730] Read of size 40 at addr 0000000000000000 by task bash/414\n[   29.612820] Call Trace:\n[   29.613030]  <TASK>\n[   29.613201]  dump_stack_lvl+0x56/0x6f\n[   29.613496]  ? kmemdup+0x30/0x40\n[   29.613754]  print_report.cold+0x494/0x6b7\n[   29.614082]  ? kmemdup+0x30/0x40\n[   29.614340]  kasan_report+0x8a/0x190\n[   29.614628]  ? kmemdup+0x30/0x40\n[   29.614888]  kasan_check_range+0x14d/0x1d0\n[   29.615213]  memcpy+0x20/0x60\n[   29.615454]  kmemdup+0x30/0x40\n[   29.615700]  lgdt3306a_probe+0x52/0x310\n[   29.616339]  i2c_device_probe+0x951/0xa90"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"8915dcd29a82096acacf54364a8425363782aea0","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"b479fd59a1f4a342b69fce34f222d93bf791dca4","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"526238d32c3acc3d597fd8c9a34652bfe9086cea","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"d082757b8359201c3864323cea4b91ea30a1e676","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"7d12e918f2994c883f41f22552a61b9310fa1e87","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"8e1e00718d0d9dd83337300572561e30b9c0d115","versionType":"git"},{"version":"4f75189024f4186a7ff9d56f4a8cb690774412ec","status":"affected","lessThan":"c1115ddbda9c930fba0fdd062e7a8873ebaf898d","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/dvb-frontends/lgdt3306a.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.11","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.11","versionType":"semver"},{"version":"5.4.278","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.219","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.161","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.94","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.34","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.9.5","status":"unaffected","lessThanOrEqual":"6.9.*","versionType":"semver"},{"version":"6.10","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/dvb-frontends/lgdt3306a.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/8915dcd29a82096acacf54364a8425363782aea0"},{"url":"https://git.kernel.org/stable/c/b479fd59a1f4a342b69fce34f222d93bf791dca4"},{"url":"https://git.kernel.org/stable/c/526238d32c3acc3d597fd8c9a34652bfe9086cea"},{"url":"https://git.kernel.org/stable/c/d082757b8359201c3864323cea4b91ea30a1e676"},{"url":"https://git.kernel.org/stable/c/7d12e918f2994c883f41f22552a61b9310fa1e87"},{"url":"https://git.kernel.org/stable/c/8e1e00718d0d9dd83337300572561e30b9c0d115"},{"url":"https://git.kernel.org/stable/c/c1115ddbda9c930fba0fdd062e7a8873ebaf898d"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T18:46:38.238Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.11","versionEndExcluding":"5.4.278"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.11","versionEndExcluding":"5.10.219"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.11","versionEndExcluding":"5.15.161"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.11","versionEndExcluding":"6.1.94"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.11","versionEndExcluding":"6.6.34"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.11","versionEndExcluding":"6.9.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.11","versionEndExcluding":"6.10"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-10T16:35:41.584253Z","id":"CVE-2022-48772","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-10T16:36:24.637Z"}},{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/stable/c/8915dcd29a82096acacf54364a8425363782aea0","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/b479fd59a1f4a342b69fce34f222d93bf791dca4","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/526238d32c3acc3d597fd8c9a34652bfe9086cea","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/d082757b8359201c3864323cea4b91ea30a1e676","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/7d12e918f2994c883f41f22552a61b9310fa1e87","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/8e1e00718d0d9dd83337300572561e30b9c0d115","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/c1115ddbda9c930fba0fdd062e7a8873ebaf898d","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T15:25:01.596Z"}}]}}}