CVE-2022-49302

USB: host: isp116x: check return value after calling platform_get_resource()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: host: isp116x: check return value after calling platform_get_resource()

It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 804de302ada3544699c5f48c5314b249af76faa3Affected 4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 7bffda1560a6f255fdf504e059fbbdb5d46b9e44Affected 4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 3825db88d8c704e7992b685618a03f82bffcf2efAffected 4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before c91a74b1f0f2d2d7e728742ae55e3ffe9ba7853dAffected 4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before ee105039d3653444de4d3ede642383c92855dc1eAffected 4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9aAffected 4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before aca0cab0e9ed33b6371aafb519a6c38f2850ffc3Affected 4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 82a101f14943f479fd190b1e5b40d91c77e2ac1bAffected 4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 134a3408c2d3f7e23eb0e4556e0a2d9f36c2614eAffected
LinuxLinux	2.6.13Affected before 2.6.13Not affected 4.9.318 through 4.9.Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.122 through 5.10.Not affected 5.15.47 through 5.15.Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 804de302ada3544699c5f48c5314b249af76faa3Affected
4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 7bffda1560a6f255fdf504e059fbbdb5d46b9e44Affected
4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 3825db88d8c704e7992b685618a03f82bffcf2efAffected
4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before c91a74b1f0f2d2d7e728742ae55e3ffe9ba7853dAffected
4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before ee105039d3653444de4d3ede642383c92855dc1eAffected
4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9aAffected
4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before aca0cab0e9ed33b6371aafb519a6c38f2850ffc3Affected
4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 82a101f14943f479fd190b1e5b40d91c77e2ac1bAffected
4808a1c0261176f9c7e28e7f108d41a381a7d0fc to before 134a3408c2d3f7e23eb0e4556e0a2d9f36c2614eAffected

LinuxLinux

2.6.13Affected
before 2.6.13Not affected
4.9.318 through 4.9.*Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.122 through 5.10.*Not affected
5.15.47 through 5.15.*Not affected
5.17.15 through 5.17.*Not affected
5.18.4 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.