CVE-2022-49019

Katalog CVE

CVSS 5.5 · Medium EPSS 0,24%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: nixge: fix NULL dereference In function nixge_hw_dma_bd_release() dereference of NULL pointer priv->rx_bd_v is possible for the case of its allocation failure in nixge_hw_dma_bd_init(). Move for() loop with priv->rx_bd_v dereference under the check for its validity. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Rincian

Terbit di NVD

21 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 13,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/45752af0247589e6d3dede577415bfe117b4392c patch
• https://git.kernel.org/stable/c/80e82f7b440b65cf131dce10f487dc73a7046e6b patch
• https://git.kernel.org/stable/c/910c0264b64ef2dad8887714a7c56c93e39a0ed3 patch
• https://git.kernel.org/stable/c/9256db4e45e8b497b0e993cc3ed4ad08eb2389b6 patch
• https://git.kernel.org/stable/c/9c584d6d9cfb935dce8fc81a4c26debac0a3049b patch