CVE-2022-49323

iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe()

It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before 3660db29b0305f9a1d95979c7af0f5db6ea99f5dAffected 9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before 98dd53a92825747395649f54d23512a13c3ed471Affected 9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before 80776a71340f57d6a4952635fc89f0342072f3caAffected 9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before 449fc4561762ad9ad85362d5f01f0d0df397457aAffected 9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before d9ed8af1dee37f181096631fb03729ece98ba816Affected
LinuxLinux	4.11Affected before 4.11Not affected 5.10.122 through 5.10.Not affected 5.15.47 through 5.15.Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before 3660db29b0305f9a1d95979c7af0f5db6ea99f5dAffected
9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before 98dd53a92825747395649f54d23512a13c3ed471Affected
9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before 80776a71340f57d6a4952635fc89f0342072f3caAffected
9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before 449fc4561762ad9ad85362d5f01f0d0df397457aAffected
9648cbc9625b67c91ed1aaf4b8b77f3f0c537496 to before d9ed8af1dee37f181096631fb03729ece98ba816Affected

LinuxLinux

4.11Affected
before 4.11Not affected
5.10.122 through 5.10.*Not affected
5.15.47 through 5.15.*Not affected
5.17.15 through 5.17.*Not affected
5.18.4 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.