CVE-2022-49187

clk: Fix clk_hw_get_clk() when dev is NULL

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: Fix clk_hw_get_clk() when dev is NULL

Any registered clk_core structure can have a NULL pointer in its dev field. While never actually documented, this is evidenced by the wide usage of clk_register and clk_hw_register with a NULL device pointer, and the fact that the core of_clk_hw_register() function also passes a NULL device pointer.

A call to clk_hw_get_clk() on a clk_hw struct whose clk_core is in that case will result in a NULL pointer derefence when it calls dev_name() on that NULL device pointer.

Add a test for this case and use NULL as the dev_id if the device pointer is NULL.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 30d6f8c15d2cd877c1f3d47d8a1064649ebe58e2 to before 4be3e4c05d8dd1b83b75652cad88c9e752ec7054Affected
  • 30d6f8c15d2cd877c1f3d47d8a1064649ebe58e2 to before d183f20cf5a7b546d4108e796b98210ceb317579Affected
  • 30d6f8c15d2cd877c1f3d47d8a1064649ebe58e2 to before 23f89fe005b105f0dcc55034c13eb89f9b570facAffected
  • 30d6f8c15d2cd877c1f3d47d8a1064649ebe58e2 to before 0c1b56df451716ba207bbf59f303473643eee4fdAffected
LinuxLinux
  • 5.11Affected
  • before 5.11Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.