CVE-2022-49487

Summary

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()

It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0b1039f016e8a37c779a4aee362cb2100ebb1cfd < e5b1e419cdb6dd8709eb05ed34039a3ded8e6003affected
LinuxLinux0b1039f016e8a37c779a4aee362cb2100ebb1cfd < daa5166450b447415aeeaac0199e445bae7bd0f2affected
LinuxLinux0b1039f016e8a37c779a4aee362cb2100ebb1cfd < f8e262eb7575a4a2412f30f7a1b293875aceba80affected
LinuxLinux0b1039f016e8a37c779a4aee362cb2100ebb1cfd < ddf66aefd685fd46500b9917333e1b1e118276dcaffected
LinuxLinux5.11affected
LinuxLinux0 < 5.11unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References