Riskcovery

CVE-2022-48663

gpio: mockup: fix NULL pointer dereference when removing debugfs

State
Published
Severity
Not scored
Published
Apr 28, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: mockup: fix NULL pointer dereference when removing debugfs

We now remove the device's debugfs entries when unbinding the driver. This now causes a NULL-pointer dereference on module exit because the platform devices are unregistered *after* the global debugfs directory has been recursively removed. Fix it by unregistering the devices first.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3815e66c2183f3430490e450ba16779cf5214ec6 to before bdea98b98f844bd8a983ca880893e509a8b4162fAffected
  • 3a10e8edee2b45a654f1f7b05f747129ec84cf9d to before 18352095a0d581f6aeb1e9fc9d68cc0152cd64b4Affected
  • bc55c1677edbe86a1c66a35e800df47dff16ad61 to before af0bfabf06c74c260265c30ba81a34e7dec0e881Affected
  • 303e6da99429510b1e4edf833afe90ac8542e747 to before b7df41a6f79dfb18ba2203f8c5f0e9c0b9b57f68Affected
LinuxLinux
  • 5.10.144 to before 5.10.146Affected
  • 5.15.69 to before 5.15.71Affected
  • 5.19.10 to before 5.19.12Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.