CVE-2022-49449

Summary

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()

It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4e53b5004745ef26a37bca4933b2d3ea71313f2a < b646e0cfeb38bf5f1944fd548f1dfa9b129fa00caffected
LinuxLinux4e53b5004745ef26a37bca4933b2d3ea71313f2a < c16b59d445135c8026a04e388d8b2762feaa3b3baffected
LinuxLinux4e53b5004745ef26a37bca4933b2d3ea71313f2a < 34c719b8fdfbd0c7c54cae56e6b0f16e9f8bf03eaffected
LinuxLinux4e53b5004745ef26a37bca4933b2d3ea71313f2a < 01f9e02e0f13df3fd291676dc80054e977be1601affected
LinuxLinux4e53b5004745ef26a37bca4933b2d3ea71313f2a < 2f661477c2bb8068194dbba9738d05219f111c6eaffected
LinuxLinux4.20affected
LinuxLinux0 < 4.20unaffected
LinuxLinux5.10.121 <= 5.10.*unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References