Riskcovery

CVE-2022-49487

mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()

It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 0b1039f016e8a37c779a4aee362cb2100ebb1cfd to before e5b1e419cdb6dd8709eb05ed34039a3ded8e6003Affected
  • 0b1039f016e8a37c779a4aee362cb2100ebb1cfd to before daa5166450b447415aeeaac0199e445bae7bd0f2Affected
  • 0b1039f016e8a37c779a4aee362cb2100ebb1cfd to before f8e262eb7575a4a2412f30f7a1b293875aceba80Affected
  • 0b1039f016e8a37c779a4aee362cb2100ebb1cfd to before ddf66aefd685fd46500b9917333e1b1e118276dcAffected
LinuxLinux
  • 5.11Affected
  • before 5.11Not affected
  • 5.15.46 through 5.15.*Not affected
  • 5.17.14 through 5.17.*Not affected
  • 5.18.3 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.