CVE-2022-49608

MEDIUM EPSS 16.9%
Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devm_kcalloc Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
16.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 12

VendorProductVersionRange
linuxlinux_kernel*≥4.18  –  <4.19.254
linuxlinux_kernel*≥4.20  –  <5.4.208
linuxlinux_kernel*≥5.5  –  <5.10.134
linuxlinux_kernel*≥5.11  –  <5.15.58
linuxlinux_kernel*≥5.16  –  <5.18.15
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/13596e6c9e541e90e5fc2c52b23f08b951370da9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/44016a85419ca0d4f1e4d0127b330f8e4e2a57d0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5595d30c4dc27d939635c3188c68203b6ece1711
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5694b162f275fb9a9f89422701b2b963be11e496
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6194c021496addc11763d1ffa89ce5751889fe3c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c3b821e8e406d5650e587b7ac624ac24e9b780a8
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/13596e6c9e541e90e5fc2c52b23f08b951370da9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/44016a85419ca0d4f1e4d0127b330f8e4e2a57d0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5595d30c4dc27d939635c3188c68203b6ece1711
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5694b162f275fb9a9f89422701b2b963be11e496
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6194c021496addc11763d1ffa89ce5751889fe3c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c3b821e8e406d5650e587b7ac624ac24e9b780a8
    Patch