CVE-2022-48908

net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()

State: Published
Severity: 5.5 Medium
Published: Aug 22, 2024
Updated: May 11, 2026
Reserved: Aug 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()

During driver initialization, the pointer of card info, i.e. the variable 'ci' is required. However, the definition of 'com20020pci_id_table' reveals that this field is empty for some devices, which will cause null pointer dereference when initializing these devices.

The following log reveals it:

[ 3.973806] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 3.973819] RIP: 0010:com20020pci_probe+0x18d/0x13e0 [com20020_pci] [ 3.975181] Call Trace: [ 3.976208] local_pci_probe+0x13f/0x210 [ 3.977248] pci_device_probe+0x34c/0x6d0 [ 3.977255] ? pci_uevent+0x470/0x470 [ 3.978265] really_probe+0x24c/0x8d0 [ 3.978273] __driver_probe_device+0x1b3/0x280 [ 3.979288] driver_probe_device+0x50/0x370

Fix this by checking whether the 'ci' is a null pointer first.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before 8e3bc7c5bbf87e86e9cd652ca2a9166942d86206Affected 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before b1ee6b9340a38bdb9e5c90f0eac5b22b122c3049Affected 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before b838add93e1dd98210482dc433768daaf752bdefAffected 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before e50c589678e50f8d574612e473ca60ef45190896Affected 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before 5f394102ee27dbf051a4e283390cd8d1759daceaAffected 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before ea372aab54903310756217d81610901a8e66cb7dAffected 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before ca0bdff4249a644f2ca7a49d410d95b8dacf1f72Affected 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before bd6f1fd5d33dfe5d1b4f2502d3694a7cc13f166dAffected
LinuxLinux	3.18Affected before 3.18Not affected 4.9.305 through 4.9.Not affected 4.14.270 through 4.14.Not affected 4.19.233 through 4.19.Not affected 5.4.183 through 5.4.Not affected 5.10.104 through 5.10.Not affected 5.15.27 through 5.15.Not affected 5.16.13 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before 8e3bc7c5bbf87e86e9cd652ca2a9166942d86206Affected
8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before b1ee6b9340a38bdb9e5c90f0eac5b22b122c3049Affected
8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before b838add93e1dd98210482dc433768daaf752bdefAffected
8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before e50c589678e50f8d574612e473ca60ef45190896Affected
8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before 5f394102ee27dbf051a4e283390cd8d1759daceaAffected
8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before ea372aab54903310756217d81610901a8e66cb7dAffected
8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before ca0bdff4249a644f2ca7a49d410d95b8dacf1f72Affected
8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f to before bd6f1fd5d33dfe5d1b4f2502d3694a7cc13f166dAffected

LinuxLinux

3.18Affected
before 3.18Not affected
4.9.305 through 4.9.*Not affected
4.14.270 through 4.14.*Not affected
4.19.233 through 4.19.*Not affected
5.4.183 through 5.4.*Not affected
5.10.104 through 5.10.*Not affected
5.15.27 through 5.15.*Not affected
5.16.13 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.