CVE-2022-49608

Katalog CVE

CVSS 5.5 · Medium EPSS 0,27%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devm_kcalloc Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/13596e6c9e541e90e5fc2c52b23f08b951370da9 patch
• https://git.kernel.org/stable/c/44016a85419ca0d4f1e4d0127b330f8e4e2a57d0 patch
• https://git.kernel.org/stable/c/5595d30c4dc27d939635c3188c68203b6ece1711 patch
• https://git.kernel.org/stable/c/5694b162f275fb9a9f89422701b2b963be11e496 patch
• https://git.kernel.org/stable/c/6194c021496addc11763d1ffa89ce5751889fe3c patch
• https://git.kernel.org/stable/c/c3b821e8e406d5650e587b7ac624ac24e9b780a8 patch