CVE-2022-49475

Summary

In the Linux kernel, the following vulnerability has been resolved:

spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

It will cause null-ptr-deref if platform_get_resource_byname() returns NULL, we need check the return value.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux858e26a515c28df3ef542d9c09493b54a329d6cf < 560dcbe1c7a78f597f2167371ebdbe2bca3d0735affected
LinuxLinux858e26a515c28df3ef542d9c09493b54a329d6cf < 10f537219629769498ecb8515e096be213224c24affected
LinuxLinux858e26a515c28df3ef542d9c09493b54a329d6cf < 33dda87d04598ac5d9a849218a373443f7d3de66affected
LinuxLinux858e26a515c28df3ef542d9c09493b54a329d6cf < 9d9c84825c3ec359b165c762a424cfdefe87fdd7affected
LinuxLinux858e26a515c28df3ef542d9c09493b54a329d6cf < a2b331ac11e1cac56f5b7d367e9f3c5796deaaedaffected
LinuxLinux5.8affected
LinuxLinux0 < 5.8unaffected
LinuxLinux5.10.121 <= 5.10.*unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References