CVE-2022-49445

pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources()

It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	c7977ec4a33633c8e8d9267dd014356cf857351c to before f991879762392c19661af5b722578089a12b305fAffected c7977ec4a33633c8e8d9267dd014356cf857351c to before 5ed0519d425619b435150372cce2ffeec71581faAffected c7977ec4a33633c8e8d9267dd014356cf857351c to before e3a1ad8fd0ac11f4fa1260c23b5db71a25473254Affected c7977ec4a33633c8e8d9267dd014356cf857351c to before fb4f022b3ad1f3ff3cafdbc7d51896090ae17701Affected c7977ec4a33633c8e8d9267dd014356cf857351c to before 5376e3d904532e657fd7ca1a9b1ff3d351527b90Affected
LinuxLinux	4.3Affected before 4.3Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

c7977ec4a33633c8e8d9267dd014356cf857351c to before f991879762392c19661af5b722578089a12b305fAffected
c7977ec4a33633c8e8d9267dd014356cf857351c to before 5ed0519d425619b435150372cce2ffeec71581faAffected
c7977ec4a33633c8e8d9267dd014356cf857351c to before e3a1ad8fd0ac11f4fa1260c23b5db71a25473254Affected
c7977ec4a33633c8e8d9267dd014356cf857351c to before fb4f022b3ad1f3ff3cafdbc7d51896090ae17701Affected
c7977ec4a33633c8e8d9267dd014356cf857351c to before 5376e3d904532e657fd7ca1a9b1ff3d351527b90Affected

LinuxLinux

4.3Affected
before 4.3Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.