CVE-2022-49472

Katalog CVE

CVSS 5.5 · Medium EPSS 0,28%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: Allow probing without .driver_data Currently, if the .probe element is present in the phy_driver structure and the .driver_data is not, a NULL pointer dereference happens. Allow passing .probe without .driver_data by inserting NULL checks for priv->type.

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 19,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/143878e18001c5a61fcc7ae5c5240323753bb641 patch
• https://git.kernel.org/stable/c/1e5fbfc2a6f384e3195446c14bbd3bc298eb88c2 patch
• https://git.kernel.org/stable/c/660dfa033ccc9afb032015b6dc76e846bba42cfb patch
• https://git.kernel.org/stable/c/7dcb404662839a4ed1a9703658fee979eb894ca4 patch
• https://git.kernel.org/stable/c/91e720b32cba25fa58eaa4c88fe957009cffe9f3 patch
• https://git.kernel.org/stable/c/abb5594ae2ba7b82cce85917cc6337ec5d774837 patch
• https://git.kernel.org/stable/c/bd219273b4e004a3f853da72e111fc8f81357501 patch
• https://git.kernel.org/stable/c/f2ef6f7539c68c6bd6c32323d8845ee102b7c450 patch