CVE-2022-49184

net: sparx5: switchdev: fix possible NULL pointer dereference

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: sparx5: switchdev: fix possible NULL pointer dereference

As the possible failure of the allocation, devm_kzalloc() may return NULL pointer. Therefore, it should be better to check the 'db' in order to prevent the dereference of NULL pointer.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	10615907e9b51c9ae92f3a6ecabd01c482f20f32 to before b375ea083fa649092cd016ac1f89a2d1fd8f8e8bAffected 10615907e9b51c9ae92f3a6ecabd01c482f20f32 to before c346791877e6ce923bb21e34b30c6f99326aa5a8Affected 10615907e9b51c9ae92f3a6ecabd01c482f20f32 to before e7e1fff76c4c57688dc7d53a3b6212182d5628d0Affected 10615907e9b51c9ae92f3a6ecabd01c482f20f32 to before 0906f3a3df07835e37077d8971aac65347f2ed57Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.*Not affected 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.