CVE-2022-50878gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() A NULL check for bridge->encoder shows that it may be NULL, but it already been dereferenced on all paths leading to the check. 812 if (!bridge->encoder) { Dereference the pointer bridge->encoder. 810 drm_connector_attach_encoder(<9611->connector, bridge->encoder);
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 23278bf54afe180967069bdc8c0f1c7a365fc63e builds before 3959e8faf8bf6bea619e8856c736db64e6eced37; from 23278bf54afe180967069bdc8c0f1c7a365fc63e before a29f7427041a943484f916157c43c46d3bbf25d4; from 23278bf54afe180967069bdc8c0f1c7a365fc63e before b2e4323e0020213f44dca6ffc815d66aef39f6f6; 23278bf54afe180967069bdc8c0f1c7a365fc63e builds before 912f84e15e94ab87f5a7156aa1870090373d8304; from 23278bf54afe180967069bdc8c0f1c7a365fc63e before ef8886f321c5dab8124b9153d25afa2a71d05323 | CNA record |
References
- https://git.kernel.org/stable/c/3959e8faf8bf6bea619e8856c736db64e6eced37
- https://git.kernel.org/stable/c/a29f7427041a943484f916157c43c46d3bbf25d4
- https://git.kernel.org/stable/c/b2e4323e0020213f44dca6ffc815d66aef39f6f6
- https://git.kernel.org/stable/c/912f84e15e94ab87f5a7156aa1870090373d8304
- https://git.kernel.org/stable/c/ef8886f321c5dab8124b9153d25afa2a71d05323
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.