CVE-2022-49449

pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()

It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	4e53b5004745ef26a37bca4933b2d3ea71313f2a to before b646e0cfeb38bf5f1944fd548f1dfa9b129fa00cAffected 4e53b5004745ef26a37bca4933b2d3ea71313f2a to before c16b59d445135c8026a04e388d8b2762feaa3b3bAffected 4e53b5004745ef26a37bca4933b2d3ea71313f2a to before 34c719b8fdfbd0c7c54cae56e6b0f16e9f8bf03eAffected 4e53b5004745ef26a37bca4933b2d3ea71313f2a to before 01f9e02e0f13df3fd291676dc80054e977be1601Affected 4e53b5004745ef26a37bca4933b2d3ea71313f2a to before 2f661477c2bb8068194dbba9738d05219f111c6eAffected
LinuxLinux	4.20Affected before 4.20Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

4e53b5004745ef26a37bca4933b2d3ea71313f2a to before b646e0cfeb38bf5f1944fd548f1dfa9b129fa00cAffected
4e53b5004745ef26a37bca4933b2d3ea71313f2a to before c16b59d445135c8026a04e388d8b2762feaa3b3bAffected
4e53b5004745ef26a37bca4933b2d3ea71313f2a to before 34c719b8fdfbd0c7c54cae56e6b0f16e9f8bf03eAffected
4e53b5004745ef26a37bca4933b2d3ea71313f2a to before 01f9e02e0f13df3fd291676dc80054e977be1601Affected
4e53b5004745ef26a37bca4933b2d3ea71313f2a to before 2f661477c2bb8068194dbba9738d05219f111c6eAffected

LinuxLinux

4.20Affected
before 4.20Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.