CVE-2022-49475

spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

It will cause null-ptr-deref if platform_get_resource_byname() returns NULL, we need check the return value.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	858e26a515c28df3ef542d9c09493b54a329d6cf to before 560dcbe1c7a78f597f2167371ebdbe2bca3d0735Affected 858e26a515c28df3ef542d9c09493b54a329d6cf to before 10f537219629769498ecb8515e096be213224c24Affected 858e26a515c28df3ef542d9c09493b54a329d6cf to before 33dda87d04598ac5d9a849218a373443f7d3de66Affected 858e26a515c28df3ef542d9c09493b54a329d6cf to before 9d9c84825c3ec359b165c762a424cfdefe87fdd7Affected 858e26a515c28df3ef542d9c09493b54a329d6cf to before a2b331ac11e1cac56f5b7d367e9f3c5796deaaedAffected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

858e26a515c28df3ef542d9c09493b54a329d6cf to before 560dcbe1c7a78f597f2167371ebdbe2bca3d0735Affected
858e26a515c28df3ef542d9c09493b54a329d6cf to before 10f537219629769498ecb8515e096be213224c24Affected
858e26a515c28df3ef542d9c09493b54a329d6cf to before 33dda87d04598ac5d9a849218a373443f7d3de66Affected
858e26a515c28df3ef542d9c09493b54a329d6cf to before 9d9c84825c3ec359b165c762a424cfdefe87fdd7Affected
858e26a515c28df3ef542d9c09493b54a329d6cf to before a2b331ac11e1cac56f5b7d367e9f3c5796deaaedAffected

LinuxLinux

5.8Affected
before 5.8Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.