Riskcovery

CVE-2022-48703

thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR

State
Published
Severity
Not scored
Published
May 3, 2024
Updated
Jun 1, 2026
Reserved
May 3, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR

In some case, the GDDV returns a package with a buffer which has zero length. It causes that kmemdup() returns ZERO_SIZE_PTR (0x10).

Then the data_vault_read() got NULL point dereference problem when accessing the 0x10 value in data_vault.

[ 71.024560] BUG: kernel NULL pointer dereference, address: 0000000000000010

This patch uses ZERO_OR_NULL_PTR() for checking ZERO_SIZE_PTR or NULL value in data_vault.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0ba13c763aacb27ab32bde5d559bf40e88465921 to before 722588f17fd3d3a127e50718ec2caf22bd7e9daaAffected
  • 0ba13c763aacb27ab32bde5d559bf40e88465921 to before 39d5137085a6c37ace4680ee4d24020a4a03e7dcAffected
  • 0ba13c763aacb27ab32bde5d559bf40e88465921 to before dae42083b045a4ddf71c57cf350cb2412b5915c2Affected
  • 0ba13c763aacb27ab32bde5d559bf40e88465921 to before 7931e28098a4c1a2a6802510b0cbe57546d2049dAffected
LinuxLinux
  • 5.8Affected
  • before 5.8Not affected
  • 5.10.258 through 5.10.*Not affected
  • 5.15.189 through 5.15.*Not affected
  • 5.19.9 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.