CVE-2022-49010

hwmon: (coretemp) Check for null before removing sysfs attrs

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (coretemp) Check for null before removing sysfs attrs

If coretemp_add_core() gets an error then pdata->core_data[indx] is already NULL and has been kfreed. Don't pass that to sysfs_remove_group() as that will crash in sysfs_remove_group().

[Shortened for readability] [91854.020159] sysfs: cannot create duplicate filename '/devices/platform/coretemp.0/hwmon/hwmon2/temp20_label' <cpu offline> [91855.126115] BUG: kernel NULL pointer dereference, address: 0000000000000188 [91855.165103] #PF: supervisor read access in kernel mode [91855.194506] #PF: error_code(0x0000) - not-present page [91855.224445] PGD 0 P4D 0 [91855.238508] Oops: 0000 [#1] PREEMPT SMP PTI ... [91855.342716] RIP: 0010:sysfs_remove_group+0xc/0x80 ... [91855.796571] Call Trace: [91855.810524] coretemp_cpu_offline+0x12b/0x1dd [coretemp] [91855.841738] ? coretemp_cpu_online+0x180/0x180 [coretemp] [91855.871107] cpuhp_invoke_callback+0x105/0x4b0 [91855.893432] cpuhp_thread_fun+0x8e/0x150 ...

Fix this by checking for NULL first.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	199e0de7f5df31a4fc485d4aaaf8a07718252ace to before fb503d077ff7b43913503eaf72995d1239028b99Affected 199e0de7f5df31a4fc485d4aaaf8a07718252ace to before 070d5ea4a0592a37ad96ce7f7b6b024f90bb009fAffected 199e0de7f5df31a4fc485d4aaaf8a07718252ace to before 280110db1a7d62ad635b103bafc3ae96e8bef75cAffected 199e0de7f5df31a4fc485d4aaaf8a07718252ace to before 89eecabe6a47403237f45aafd7d24f93cb973653Affected 199e0de7f5df31a4fc485d4aaaf8a07718252ace to before f06e0cd01eab954bd5f2190c9faa79bb5357e05bAffected 199e0de7f5df31a4fc485d4aaaf8a07718252ace to before 7692700ac818866d138a8de555130a6e70e6ac16Affected 199e0de7f5df31a4fc485d4aaaf8a07718252ace to before ae6c8b6e5d5628df1c475c0a8fca1465e205c95bAffected 199e0de7f5df31a4fc485d4aaaf8a07718252ace to before a89ff5f5cc64b9fe7a992cf56988fd36f56ca82aAffected
LinuxLinux	3.0Affected before 3.0Not affected 4.9.335 through 4.9.Not affected 4.14.301 through 4.14.Not affected 4.19.268 through 4.19.Not affected 5.4.226 through 5.4.Not affected 5.10.158 through 5.10.Not affected 5.15.82 through 5.15.Not affected 6.0.12 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

199e0de7f5df31a4fc485d4aaaf8a07718252ace to before fb503d077ff7b43913503eaf72995d1239028b99Affected
199e0de7f5df31a4fc485d4aaaf8a07718252ace to before 070d5ea4a0592a37ad96ce7f7b6b024f90bb009fAffected
199e0de7f5df31a4fc485d4aaaf8a07718252ace to before 280110db1a7d62ad635b103bafc3ae96e8bef75cAffected
199e0de7f5df31a4fc485d4aaaf8a07718252ace to before 89eecabe6a47403237f45aafd7d24f93cb973653Affected
199e0de7f5df31a4fc485d4aaaf8a07718252ace to before f06e0cd01eab954bd5f2190c9faa79bb5357e05bAffected
199e0de7f5df31a4fc485d4aaaf8a07718252ace to before 7692700ac818866d138a8de555130a6e70e6ac16Affected
199e0de7f5df31a4fc485d4aaaf8a07718252ace to before ae6c8b6e5d5628df1c475c0a8fca1465e205c95bAffected
199e0de7f5df31a4fc485d4aaaf8a07718252ace to before a89ff5f5cc64b9fe7a992cf56988fd36f56ca82aAffected

LinuxLinux

3.0Affected
before 3.0Not affected
4.9.335 through 4.9.*Not affected
4.14.301 through 4.14.*Not affected
4.19.268 through 4.19.*Not affected
5.4.226 through 5.4.*Not affected
5.10.158 through 5.10.*Not affected
5.15.82 through 5.15.*Not affected
6.0.12 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.