CVE-2022-49302

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49302
In the Linux kernel, the following vulnerability has been resolved: USB: host: isp116x: check return value after calling platform_get_resource() It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/134a3408c2d3f7e23eb0e4556e0a2d9f36c2614e Patch
https://git.kernel.org/stable/c/3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9a Patch
https://git.kernel.org/stable/c/3825db88d8c704e7992b685618a03f82bffcf2ef Patch
https://git.kernel.org/stable/c/7bffda1560a6f255fdf504e059fbbdb5d46b9e44 Patch
https://git.kernel.org/stable/c/804de302ada3544699c5f48c5314b249af76faa3 Patch
https://git.kernel.org/stable/c/82a101f14943f479fd190b1e5b40d91c77e2ac1b Patch
https://git.kernel.org/stable/c/aca0cab0e9ed33b6371aafb519a6c38f2850ffc3 Patch
https://git.kernel.org/stable/c/c91a74b1f0f2d2d7e728742ae55e3ffe9ba7853d Patch
https://git.kernel.org/stable/c/ee105039d3653444de4d3ede642383c92855dc1e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Apr 2025, 20:05

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-476
References () https://git.kernel.org/stable/c/134a3408c2d3f7e23eb0e4556e0a2d9f36c2614e - () https://git.kernel.org/stable/c/134a3408c2d3f7e23eb0e4556e0a2d9f36c2614e - Patch
References () https://git.kernel.org/stable/c/3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9a - () https://git.kernel.org/stable/c/3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9a - Patch
References () https://git.kernel.org/stable/c/3825db88d8c704e7992b685618a03f82bffcf2ef - () https://git.kernel.org/stable/c/3825db88d8c704e7992b685618a03f82bffcf2ef - Patch
References () https://git.kernel.org/stable/c/7bffda1560a6f255fdf504e059fbbdb5d46b9e44 - () https://git.kernel.org/stable/c/7bffda1560a6f255fdf504e059fbbdb5d46b9e44 - Patch
References () https://git.kernel.org/stable/c/804de302ada3544699c5f48c5314b249af76faa3 - () https://git.kernel.org/stable/c/804de302ada3544699c5f48c5314b249af76faa3 - Patch
References () https://git.kernel.org/stable/c/82a101f14943f479fd190b1e5b40d91c77e2ac1b - () https://git.kernel.org/stable/c/82a101f14943f479fd190b1e5b40d91c77e2ac1b - Patch
References () https://git.kernel.org/stable/c/aca0cab0e9ed33b6371aafb519a6c38f2850ffc3 - () https://git.kernel.org/stable/c/aca0cab0e9ed33b6371aafb519a6c38f2850ffc3 - Patch
References () https://git.kernel.org/stable/c/c91a74b1f0f2d2d7e728742ae55e3ffe9ba7853d - () https://git.kernel.org/stable/c/c91a74b1f0f2d2d7e728742ae55e3ffe9ba7853d - Patch
References () https://git.kernel.org/stable/c/ee105039d3653444de4d3ede642383c92855dc1e - () https://git.kernel.org/stable/c/ee105039d3653444de4d3ede642383c92855dc1e - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: USB: host: isp116x: verificar el valor de retorno después de llamar a platform_get_resource() Causará null-ptr-deref si platform_get_resource() devuelve NULL, necesitamos verificar el valor de retorno.

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-04-14 20:05

NVD link : CVE-2022-49302

Mitre link : CVE-2022-49302

CVE.ORG link : CVE-2022-49302

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference