Riskcovery

CVE-2022-49494

mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe()

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe()

It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • ec4ba01e894d3165e4d1ccbef782ef5593b708b4 to before 81f1ddffdc22ca5789e33b9d4712914e302090c1Affected
  • ec4ba01e894d3165e4d1ccbef782ef5593b708b4 to before 0cfee868b89ffa945f3d535ee5c985cb40c5a0f8Affected
  • ec4ba01e894d3165e4d1ccbef782ef5593b708b4 to before 069af5e27c1b0f7677ef76d8d3102e503ca4f80bAffected
  • ec4ba01e894d3165e4d1ccbef782ef5593b708b4 to before 13b60d3dc84b47307669edb66b633b18466014b4Affected
  • ec4ba01e894d3165e4d1ccbef782ef5593b708b4 to before a28ed09dafee20da51eb26452950839633afd824Affected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.121 through 5.10.*Not affected
  • 5.15.46 through 5.15.*Not affected
  • 5.17.14 through 5.17.*Not affected
  • 5.18.3 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.