CVE-2022-49472

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: phy: micrel: Allow probing without .driver_data

Currently, if the .probe element is present in the phy_driver structure and the .driver_data is not, a NULL pointer dereference happens.

Allow passing .probe without .driver_data by inserting NULL checks for priv->type.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe6a423a81da0eb3da755428f4d2df5a9ba13030f < 7dcb404662839a4ed1a9703658fee979eb894ca4affected
LinuxLinuxe6a423a81da0eb3da755428f4d2df5a9ba13030f < 91e720b32cba25fa58eaa4c88fe957009cffe9f3affected
LinuxLinuxe6a423a81da0eb3da755428f4d2df5a9ba13030f < 1e5fbfc2a6f384e3195446c14bbd3bc298eb88c2affected
LinuxLinuxe6a423a81da0eb3da755428f4d2df5a9ba13030f < abb5594ae2ba7b82cce85917cc6337ec5d774837affected
LinuxLinuxe6a423a81da0eb3da755428f4d2df5a9ba13030f < 660dfa033ccc9afb032015b6dc76e846bba42cfbaffected
LinuxLinuxe6a423a81da0eb3da755428f4d2df5a9ba13030f < 143878e18001c5a61fcc7ae5c5240323753bb641affected
LinuxLinuxe6a423a81da0eb3da755428f4d2df5a9ba13030f < bd219273b4e004a3f853da72e111fc8f81357501affected
LinuxLinuxe6a423a81da0eb3da755428f4d2df5a9ba13030f < f2ef6f7539c68c6bd6c32323d8845ee102b7c450affected
LinuxLinux3.19affected
LinuxLinux0 < 3.19unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.121 <= 5.10.*unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References