Linux Kernel Vulnerability in ACPI Device Management

CVE-2022-50327

What is CVE-2022-50327?

A vulnerability in the Linux kernel involves the ACPI processor where the return value of the function acpi_fetch_acpi_dev() can potentially be NULL. If this occurs, it leads to a NULL pointer dereference in the acpi_device_hid() function. This flaw could enable attackers to exploit the system by causing unexpected behaviors or crashes, affecting system stability and security. It is crucial for users to ensure their Linux Kernel is updated to the latest version to mitigate this vulnerability.

References