Null Pointer Dereference in Linux Kernel's Nintendo HID Driver
Summary
CVE-2022-49974: In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix rumble worker null pointer deref We can dereference a null pointer trying to queue work to a destroyed workqueue. Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of many operating systems, providing essential services and managing hardware resources. The Nintendo HID driver allows for the integration of Nintendo controllers with Linux systems, enabling users to utilize these devices for gaming and other applications. This driver is crucial for ensuring proper communication between the operating system and the hardware, but it is susceptible to vulnerabilities that can compromise system stability and security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Nintendo HID driver that can lead to a null pointer dereference. This issue arises when the rumble worker attempts to queue work to a workqueue that has already been destroyed, specifically when the controller is disconnected. The function nintendo_hid_remove is called, which destroys the rumble_queue. If the controller state is set to JOYCON_CTLR_STATE_REMOVED, the system may attempt to use this destroyed queue, resulting in a null pointer dereference. This can lead to system crashes or unexpected behavior, posing a risk to system integrity.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is best to apply the patch as soon as it is available to avoid potential issues.
Conclusion
The vulnerability CVE-2022-49974 in the Linux kernel's Nintendo HID driver poses a significant risk due to the potential for null pointer dereference, leading to system instability. It is crucial for users to update their systems to the patched version to ensure continued security and functionality.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49974 is a vulnerability in the Linux kernel's Nintendo HID driver that can lead to a null pointer dereference when a controller is disconnected.
This vulnerability can cause system crashes or unexpected behavior when attempting to use a Nintendo controller that has been disconnected.
Yes, a patch is available in version 6.0.2-1 of the Linux package for Debian systems.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds, it is advisable to monitor your system for any unusual behavior and apply the patch as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
