CVE-2022-49187

MEDIUM EPSS 15.7%
Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: clk: Fix clk_hw_get_clk() when dev is NULL Any registered clk_core structure can have a NULL pointer in its dev field. While never actually documented, this is evidenced by the wide usage of clk_register and clk_hw_register with a NULL device pointer, and the fact that the core of_clk_hw_register() function also passes a NULL device pointer. A call to clk_hw_get_clk() on a clk_hw struct whose clk_core is in that case will result in a NULL pointer derefence when it calls dev_name() on that NULL device pointer. Add a test for this case and use NULL as the dev_id if the device pointer is NULL.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
15.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥5.11  –  <5.15.33
linuxlinux_kernel*≥5.16  –  <5.16.19
linuxlinux_kernel*≥5.17  –  <5.17.2

References 4

  • git.kernel.org https://git.kernel.org/stable/c/0c1b56df451716ba207bbf59f303473643eee4fd
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/23f89fe005b105f0dcc55034c13eb89f9b570fac
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4be3e4c05d8dd1b83b75652cad88c9e752ec7054
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d183f20cf5a7b546d4108e796b98210ceb317579
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0c1b56df451716ba207bbf59f303473643eee4fd
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/23f89fe005b105f0dcc55034c13eb89f9b570fac
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4be3e4c05d8dd1b83b75652cad88c9e752ec7054
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d183f20cf5a7b546d4108e796b98210ceb317579
    Patch