CVE-2022-49302

Summary

In the Linux kernel, the following vulnerability has been resolved:

USB: host: isp116x: check return value after calling platform_get_resource()

It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4808a1c0261176f9c7e28e7f108d41a381a7d0fc < 804de302ada3544699c5f48c5314b249af76faa3affected
LinuxLinux4808a1c0261176f9c7e28e7f108d41a381a7d0fc < 7bffda1560a6f255fdf504e059fbbdb5d46b9e44affected
LinuxLinux4808a1c0261176f9c7e28e7f108d41a381a7d0fc < 3825db88d8c704e7992b685618a03f82bffcf2efaffected
LinuxLinux4808a1c0261176f9c7e28e7f108d41a381a7d0fc < c91a74b1f0f2d2d7e728742ae55e3ffe9ba7853daffected
LinuxLinux4808a1c0261176f9c7e28e7f108d41a381a7d0fc < ee105039d3653444de4d3ede642383c92855dc1eaffected
LinuxLinux4808a1c0261176f9c7e28e7f108d41a381a7d0fc < 3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9aaffected
LinuxLinux4808a1c0261176f9c7e28e7f108d41a381a7d0fc < aca0cab0e9ed33b6371aafb519a6c38f2850ffc3affected
LinuxLinux4808a1c0261176f9c7e28e7f108d41a381a7d0fc < 82a101f14943f479fd190b1e5b40d91c77e2ac1baffected
LinuxLinux4808a1c0261176f9c7e28e7f108d41a381a7d0fc < 134a3408c2d3f7e23eb0e4556e0a2d9f36c2614eaffected
LinuxLinux2.6.13affected
LinuxLinux0 < 2.6.13unaffected
LinuxLinux4.9.318 <= 4.9.*unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.122 <= 5.10.*unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References