CVE-2022-48750 is a vulnerability identified in the Linux kernel's hardware monitoring (hwmon) subsystem, specifically within the nct6775 driver. The issue arises in the clear_caseopen() function, which is responsible for clearing the chassis intrusion alarm. The vulnerability is caused by a NULL pointer dereference due to improper handling of device pointers. In this case, the function mistakenly uses the hwmon device pointer instead of the platform device pointer, resulting in the platform data not being set in the hwmon device. This leads to a kernel crash (NULL pointer dereference) when the function attempts to access platform-specific data that is not initialized. The crash manifests as a kernel oops, which can cause system instability or denial of service. The root cause is a logic error in how the driver stores and retrieves the sio_data pointer, which should be stored in the nct6775_data structure and accessed from there. This vulnerability affects Linux kernel versions including 5.16.2-200.fc35.x86_64 and potentially others using the affected driver. The vulnerability was reported by Paweł Marciniak and has been addressed by correcting the pointer usage in the driver code. There are no known exploits in the wild at this time, and no CVSS score has been assigned yet.

For European organizations, the impact of CVE-2022-48750 primarily involves potential system instability and denial of service on Linux systems running the vulnerable kernel versions with the nct6775 hardware monitoring driver enabled. This driver is commonly used on motherboards with Nuvoton NCT6775 series sensors, which monitor hardware parameters such as temperature, voltage, and fan speeds. Servers, workstations, and embedded systems relying on these sensors for hardware health monitoring could experience kernel crashes when clearing chassis intrusion alarms, potentially disrupting critical operations. While this vulnerability does not directly lead to privilege escalation or remote code execution, the resulting kernel panic could cause downtime or data loss if systems reboot unexpectedly. European organizations with infrastructure running Fedora 35 or other distributions using the affected kernel versions are at risk. The vulnerability could affect data centers, industrial control systems, and enterprise environments where hardware monitoring is essential for operational stability. Given the lack of known exploits, the immediate risk is moderate, but unpatched systems remain vulnerable to accidental or malicious triggering of the crash, impacting availability.

To mitigate CVE-2022-48750, European organizations should: 1) Apply the latest Linux kernel patches that address this vulnerability as soon as they become available from their distribution vendors. 2) Identify systems using the nct6775 driver by checking hardware sensor configurations and kernel module usage. 3) Temporarily disable chassis intrusion alarm monitoring if feasible, to avoid triggering the vulnerable code path until patches are applied. 4) Monitor kernel logs for oops or crash messages related to clear_caseopen or nct6775 to detect attempts to trigger the vulnerability. 5) For critical systems, consider kernel version upgrades to versions where the fix is included or use backported patches provided by trusted vendors. 6) Implement robust system monitoring and automated recovery mechanisms to minimize downtime in case of crashes. 7) Engage with hardware vendors to confirm compatibility and support for patched kernel versions. These steps go beyond generic advice by focusing on hardware-specific driver usage, proactive detection, and operational continuity.