CVE-2022-49308

extcon: Modify extcon device to be created after driver data is set

State: Published
Severity: Not scored
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

extcon: Modify extcon device to be created after driver data is set

Currently, someone can invoke the sysfs such as state_show() intermittently before dev_set_drvdata() is done. And it can be a cause of kernel Oops because of edev is Null at that time. So modified the driver registration to after setting drviver data.

- Oops's backtrace.

Backtrace: [<c067865c>] (state_show) from [<c05222e8>] (dev_attr_show) [<c05222c0>] (dev_attr_show) from [<c02c66e0>] (sysfs_kf_seq_show) [<c02c6648>] (sysfs_kf_seq_show) from [<c02c496c>] (kernfs_seq_show) [<c02c4938>] (kernfs_seq_show) from [<c025e2a0>] (seq_read) [<c025e11c>] (seq_read) from [<c02c50a0>] (kernfs_fop_read) [<c02c5064>] (kernfs_fop_read) from [<c0231cac>] (__vfs_read) [<c0231c5c>] (__vfs_read) from [<c0231ee0>] (vfs_read) [<c0231e34>] (vfs_read) from [<c0232464>] (ksys_read) [<c02323f0>] (ksys_read) from [<c02324fc>] (sys_read) [<c02324e4>] (sys_read) from [<c00091d0>] (__sys_trace_return)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 6e721f3ad0535b24f19a62420f4da95212cf069cAffected de55d8716ac50a356cea736c29bb7db5ac3d0190 to before cb81ea998c461868d1168411a867d8ffee12f23fAffected de55d8716ac50a356cea736c29bb7db5ac3d0190 to before d472c78cc82999d07bd09193a6718016ce9cd386Affected de55d8716ac50a356cea736c29bb7db5ac3d0190 to before abf3b222614f49f98e606fccdd269161c0d70204Affected de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 368e68ad6da4317fc4170e8d92b51c13d1bfe7a7Affected de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 35ff1ac55d301efb3f467cf5426faaeb3452994bAffected de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 033ec4e7e59ae5e1ef1e8c10bc6552926044ed1cAffected de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 5dcc2afe716d69f5112ce035cb14f007461ff189Affected
LinuxLinux	3.5Affected before 3.5Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.122 through 5.10.Not affected 5.15.47 through 5.15.Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 6e721f3ad0535b24f19a62420f4da95212cf069cAffected
de55d8716ac50a356cea736c29bb7db5ac3d0190 to before cb81ea998c461868d1168411a867d8ffee12f23fAffected
de55d8716ac50a356cea736c29bb7db5ac3d0190 to before d472c78cc82999d07bd09193a6718016ce9cd386Affected
de55d8716ac50a356cea736c29bb7db5ac3d0190 to before abf3b222614f49f98e606fccdd269161c0d70204Affected
de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 368e68ad6da4317fc4170e8d92b51c13d1bfe7a7Affected
de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 35ff1ac55d301efb3f467cf5426faaeb3452994bAffected
de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 033ec4e7e59ae5e1ef1e8c10bc6552926044ed1cAffected
de55d8716ac50a356cea736c29bb7db5ac3d0190 to before 5dcc2afe716d69f5112ce035cb14f007461ff189Affected

LinuxLinux

3.5Affected
before 3.5Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.122 through 5.10.*Not affected
5.15.47 through 5.15.*Not affected
5.17.15 through 5.17.*Not affected
5.18.4 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.