CVE-2024-42277 iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address NULL Dereference Vulnerabilities in SPRD Components Two vulnerabilities have been identified in SPRD components, specifically CVE-2022-49125 and CVE-2024-42277. CVE-2022-49125, published on February 26, 2025, addresses a potential NULL dereference in the drm/sprd module, while CVE-2024-42277, published on August 17, 2024, focuses on avoiding NULL dereference in the sprd_iommu_hw_en function. Both vulnerabilities could impact systems utilizing these components. 2 sources 46