Null Pointer Dereference Vulnerability in Linux Kernel Affects Megachips Drivers

CVE-2022-50317

What is CVE-2022-50317?

A vulnerability in the Linux kernel related to the Megachips driver has been identified, specifically concerning a null pointer dereference that occurs when removing the module. This issue arises because the drivers for the stdp2690 and stdp4028 bridges do not probe simultaneously, leading the system to attempt removal of an uninitialized object, resulting in a general protection fault. The vulnerability has been mitigated by implementing a check to ensure that both bridges are probed before proceeding with any removal operations.

References