CVE-2022-49448

soc: bcm: Check for NULL return of devm_kzalloc()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: bcm: Check for NULL return of devm_kzalloc()

As the potential failure of allocation, devm_kzalloc() may return NULL. Then the 'pd->pmb' and the follow lines of code may bring null pointer dereference.

Therefore, it is better to check the return value of devm_kzalloc() to avoid this confusion.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	8bcac4011ebe0dbdd46fd55b036ee855c95702d3 to before 5650e103bfc70156001615861fb8aafb3947da6eAffected 8bcac4011ebe0dbdd46fd55b036ee855c95702d3 to before 36339ea7bae4943be01c8e9545e46e334591fecdAffected 8bcac4011ebe0dbdd46fd55b036ee855c95702d3 to before b48b98743b568bb219152ba2e15af6ef0d3d8a9bAffected 8bcac4011ebe0dbdd46fd55b036ee855c95702d3 to before b4bd2aafacce48db26b0a213d849818d940556ddAffected
LinuxLinux	5.12Affected before 5.12Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.