{"id":"CVE-2022-49974","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: nintendo: fix rumble worker null pointer deref\n\nWe can dereference a null pointer trying to queue work to a destroyed\nworkqueue.\n\nIf the device is disconnected, ni…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: nintendo: fix rumble worker null pointer deref\n\nWe can dereference a null pointer trying to queue work to a destroyed\nworkqueue.\n\nIf the device is disconnected, ni…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-476"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.16, < 5.19.7","linux_kernel = 6.0"],"patched":["linux_kernel 5.19.7"],"published":"2025-06-18","updated":"2026-08-15","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-49974","references":[{"url":"https://git.kernel.org/stable/c/1ff89e06c2e5fab30274e4b02360d4241d6e605e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7c6e6c334154be16740b44dcd7638fb510b9bd91","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd"],"epss":0.00285,"epssPercentile":0.21241,"ingestedAt":"2026-08-15T13:26:44.826Z","slug":"CVE-2022-49974","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: nintendo: fix rumble worker null pointer deref\n\nWe can dereference a null pointer trying to queue work to a destroyed\nworkqueue.\n\nIf the device is disconnected, nintendo_hid_remove is called, in which\nthe rumble_queue is destroyed. Avoid using that queue to defer rumble\nwork once the controller state is set to JOYCON_CTLR_STATE_REMOVED.\n\nThis eliminates the null pointer dereference.\n\n## Affected\n\n- `linux_kernel >= 5.16, < 5.19.7`\n- `linux_kernel = 6.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 5.19.7`","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}