CVE-2022-49375

Summary

In the Linux kernel, the following vulnerability has been resolved:

rtc: mt6397: check return value after calling platform_get_resource()

It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxfc2979118f3f5193475cb53d5df7bdaa7e358a42 < 3867f0bbb94773d41e789257abec0d14f37da217affected
LinuxLinuxfc2979118f3f5193475cb53d5df7bdaa7e358a42 < 79fa3f5758d8712df0678df98161f948fc4370e5affected
LinuxLinuxfc2979118f3f5193475cb53d5df7bdaa7e358a42 < 6ecd4d5c28408df36a1a6f0b1973f633c949ac1faffected
LinuxLinuxfc2979118f3f5193475cb53d5df7bdaa7e358a42 < d77f28c1bc9d3043a52069fe42e4a26fbf961ebdaffected
LinuxLinuxfc2979118f3f5193475cb53d5df7bdaa7e358a42 < 82bfea344e8f7e9a0e0b1bf9af27552baa756620affected
LinuxLinuxfc2979118f3f5193475cb53d5df7bdaa7e358a42 < 865051de2d9eaa50630e055b73921ceaf3c4a7fcaffected
LinuxLinuxfc2979118f3f5193475cb53d5df7bdaa7e358a42 < 58a729c55ce3a432eb827fdaa24c7909cd3b0a6baffected
LinuxLinuxfc2979118f3f5193475cb53d5df7bdaa7e358a42 < da38e86d6cf6dd3bc65c602d998f357145aa1a0baffected
LinuxLinuxfc2979118f3f5193475cb53d5df7bdaa7e358a42 < d3b43eb505bffb8e4cdf6800c15660c001553fe6affected
LinuxLinux4.2affected
LinuxLinux0 < 4.2unaffected
LinuxLinux4.9.318 <= 4.9.*unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.122 <= 5.10.*unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References