CVE-2022-49307

tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()

When the driver fails at alloc_hdlcdev(), and then we remove the driver module, we will get the following splat:

[ 25.065966] general protection fault, probably for non-canonical address 0xdffffc0000000182: 0000 [#1] PREEMPT SMP KASAN PTI [ 25.066914] KASAN: null-ptr-deref in range [0x0000000000000c10-0x0000000000000c17] [ 25.069262] RIP: 0010:detach_hdlc_protocol+0x2a/0x3e0 [ 25.077709] Call Trace: [ 25.077924] <TASK> [ 25.078108] unregister_hdlc_device+0x16/0x30 [ 25.078481] slgt_cleanup+0x157/0x9f0 [synclink_gt]

Fix this by checking whether the 'info->netdev' is a null pointer first.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 50c341f9a2adc4c32a8ad5a39eb99d9c4a419e0dAffected 705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 078212ad15dbd88840c82c97f12c93d83703c8fdAffected 705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before ba08cbc5b53e151d0acf1930fb526fc65b7f3e65Affected 705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before f6e07eb7ebec53ffe81fc2489589320fbe4a6b75Affected 705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before d68d5e68b7f64de7170f8e04dd9b995c36b2c71cAffected 705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 8a95696bdc0e13f8980f05b54a3b9081963d1256Affected 705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before ddd67751ab86c6a65f95c35293c42f85a42ac05dAffected 705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 1ceb4ca9543a8a788febf6bc8dad2e605e172d5eAffected 705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 689ca31c542687709ba21ec2195c1fbce34fd029Affected
LinuxLinux	2.6.16Affected before 2.6.16Not affected 4.9.318 through 4.9.Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.122 through 5.10.Not affected 5.15.47 through 5.15.Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 50c341f9a2adc4c32a8ad5a39eb99d9c4a419e0dAffected
705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 078212ad15dbd88840c82c97f12c93d83703c8fdAffected
705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before ba08cbc5b53e151d0acf1930fb526fc65b7f3e65Affected
705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before f6e07eb7ebec53ffe81fc2489589320fbe4a6b75Affected
705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before d68d5e68b7f64de7170f8e04dd9b995c36b2c71cAffected
705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 8a95696bdc0e13f8980f05b54a3b9081963d1256Affected
705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before ddd67751ab86c6a65f95c35293c42f85a42ac05dAffected
705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 1ceb4ca9543a8a788febf6bc8dad2e605e172d5eAffected
705b6c7b34f2621f95f606d0e683daa10cdb8eb9 to before 689ca31c542687709ba21ec2195c1fbce34fd029Affected

LinuxLinux

2.6.16Affected
before 2.6.16Not affected
4.9.318 through 4.9.*Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.122 through 5.10.*Not affected
5.15.47 through 5.15.*Not affected
5.17.15 through 5.17.*Not affected
5.18.4 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.