{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"07a606e1389a63b61cb8cd591026f30529117573","status":"affected","version":"320b8b0d13b81f3697acff5b6ddb47f88a09c118","versionType":"git"},{"lessThan":"1d75b73ec6d6b705cca528b36d8315e43e8d7fa5","status":"affected","version":"320b8b0d13b81f3697acff5b6ddb47f88a09c118","versionType":"git"},{"lessThan":"0484271ab0ce50649329fa9dc23c50853c5b26a4","status":"affected","version":"320b8b0d13b81f3697acff5b6ddb47f88a09c118","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.56","versionType":"semver"},{"lessThanOrEqual":"5.18.*","status":"unaffected","version":"5.18.13","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"5.19","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49616","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: rt7*-sdw: harden jack_detect_handler\n\nRealtek headset codec drivers typically check if the card is\ninstantiated before proceeding with the jack detection.\n\nThe rt700, rt711 and rt711-sdca are however missing a check on the\ncard pointer, which can lead to NULL dereferences encountered in\ndriver bind/unbind tests.","epss":{"date":"2026-11-05","percentile":0.17602,"score":0.00258},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908181175,"publishedAt":1740536616180,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/07a606e1389a63b61cb8cd591026f30529117573"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/1d75b73ec6d6b705cca528b36d8315e43e8d7fa5"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0484271ab0ce50649329fa9dc23c50853c5b26a4"}],"remediation":[],"revision":"6400f1600da824652a0fc000d1915408997fccb4edc9c19a563fb084e3cf908d","sources":[{"modifiedAt":1793908181175,"name":"CNA: Linux","retrievedAt":1793909376650,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49616"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909409761,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49616"}],"ssvc":{"assessedAt":1793907987419,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"ASoC: rt7*-sdw: harden jack_detect_handler","updatedAt":1793909409761}