CVE-2022-49960

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: fix null pointer dereference

Asus chromebook CX550 crashes during boot on v5.17-rc1 kernel. The root cause is null pointer defeference of binext in tglgetbwinfo() in drivers/gpu/drm/i915/display/intel_bw.c.

BUG: kernel NULL pointer dereference, address: 000000000000002e PGD 0 P4D 0 Oops: 0002 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 1 Comm: swapper/0 Tainted: G U 5.17.0-rc1 Hardware name: Google Delbin/Delbin, BIOS GoogleDelbin.13672.156.3 05/14/2021 RIP: 0010:tglgetbwinfo+0x2de/0x510 ... [ 2.554467] Call Trace: [ 2.554467] <TASK> [ 2.554467] intelbwinithw+0x14a/0x434 [ 2.554467] ? _printk+0x59/0x73 [ 2.554467] ? _deverr+0x77/0x91 [ 2.554467] i915driverhwprobe+0x329/0x33e [ 2.554467] i915driverprobe+0x4c8/0x638 [ 2.554467] i915pciprobe+0xf8/0x14e [ 2.554467] ? _rawspinunlockirqrestore+0x12/0x2c [ 2.554467] pcideviceprobe+0xaa/0x142 [ 2.554467] reallyprobe+0x13f/0x2f4 [ 2.554467] _driverprobedevice+0x9e/0xd3 [ 2.554467] driverprobedevice+0x24/0x7c [ 2.554467] _driverattach+0xba/0xcf [ 2.554467] ? driverattach+0x1f/0x1f [ 2.554467] busforeachdev+0x8c/0xc0 [ 2.554467] busadddriver+0x11b/0x1f7 [ 2.554467] driverregister+0x60/0xea [ 2.554467] ? mipidsibusinit+0x16/0x16 [ 2.554467] i915init+0x2c/0xb9 [ 2.554467] ? mipidsibusinit+0x16/0x16 [ 2.554467] dooneinitcall+0x12e/0x2b3 [ 2.554467] doinitcalllevel+0xd6/0xf3 [ 2.554467] doinitcalls+0x4e/0x79 [ 2.554467] kernelinitfreeable+0xed/0x14d [ 2.554467] ? restinit+0xc1/0xc1 [ 2.554467] kernelinit+0x1a/0x120 [ 2.554467] retfrom_fork+0x1f/0x30 [ 2.554467] </TASK> ... Kernel panic - not syncing: Fatal exception

(cherry picked from commit c247cd03898c4c43c3bce6d4014730403bc13032)