Fluid Attacks Database

Description

A NULL pointer dereference was found in the IT6505 DisplayPort bridge driver. If an HPD interrupt fires before the DRM bridge registration completes, the driver attempts to access an uninitialized AUX channel, causing a kernel crash.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	linux	>=0 <6.1.4-1	6.1.4-1
debian 13	linux	>=0 <6.1.4-1	6.1.4-1
debian 12	linux	>=0 <6.1.4-1	6.1.4-1
rpm rhel8	kernel	<0:4.18.0-513.5.1.el8_9	0:4.18.0-513.5.1.el8_9
rpm rhel9	kernel	<0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
rpm rhel9	kernel-rt	-	-
rpm rhel8	kernel-rt	-	-

Aliases

1. CVE-2022-508472. NVD-2022-508473. OSV-DEBIAN-2022-508474. OSV-2022-508475. SECURITY-TRACKER-CVE-2022-50847

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.