CVE-2022-49618

Katalog CVE

CVSS 5.5 · Medium EPSS 0,26%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() pdesc could be null but still dereference pdesc->name and it will lead to a null pointer access. So we move a null check before dereference.

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

15 Agustus 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/3cb392b64304a05bf647e2e44efacd9a1f3c3c6a patch
• https://git.kernel.org/stable/c/84a85d3fef2e75b1fe9fc2af6f5267122555a1ed patch
• https://git.kernel.org/stable/c/e162a24f1dd06c0dcae71f2565c9f3da2827b98e patch
• https://git.kernel.org/stable/c/ef1e38532f4b2f0f3b460e938a2e7076c3bed5ee patch