CVE-2022-49019

net: ethernet: nixge: fix NULL dereference

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Aug 22, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: nixge: fix NULL dereference

In function nixge_hw_dma_bd_release() dereference of NULL pointer priv->rx_bd_v is possible for the case of its allocation failure in nixge_hw_dma_bd_init().

Move for() loop with priv->rx_bd_v dereference under the check for its validity.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 492caffa8a1a405f661c111acabfe6b8b9645db8 to before 910c0264b64ef2dad8887714a7c56c93e39a0ed3Affected
  • 492caffa8a1a405f661c111acabfe6b8b9645db8 to before 45752af0247589e6d3dede577415bfe117b4392cAffected
  • 492caffa8a1a405f661c111acabfe6b8b9645db8 to before 9c584d6d9cfb935dce8fc81a4c26debac0a3049bAffected
  • 492caffa8a1a405f661c111acabfe6b8b9645db8 to before 80e82f7b440b65cf131dce10f487dc73a7046e6bAffected
  • 492caffa8a1a405f661c111acabfe6b8b9645db8 to before 9256db4e45e8b497b0e993cc3ed4ad08eb2389b6Affected
LinuxLinux
  • 4.17Affected
  • before 4.17Not affected
  • 5.4.226 through 5.4.*Not affected
  • 5.10.158 through 5.10.*Not affected
  • 5.15.82 through 5.15.*Not affected
  • 6.0.12 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.