CVE-2022-49608

pinctrl: ralink: Check for null return of devm_kcalloc

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: ralink: Check for null return of devm_kcalloc

Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	a86854d0c599b3202307abceb68feee4d7061578 to before 13596e6c9e541e90e5fc2c52b23f08b951370da9Affected a86854d0c599b3202307abceb68feee4d7061578 to before 6194c021496addc11763d1ffa89ce5751889fe3cAffected a86854d0c599b3202307abceb68feee4d7061578 to before 5694b162f275fb9a9f89422701b2b963be11e496Affected a86854d0c599b3202307abceb68feee4d7061578 to before 44016a85419ca0d4f1e4d0127b330f8e4e2a57d0Affected a86854d0c599b3202307abceb68feee4d7061578 to before 5595d30c4dc27d939635c3188c68203b6ece1711Affected a86854d0c599b3202307abceb68feee4d7061578 to before c3b821e8e406d5650e587b7ac624ac24e9b780a8Affected
LinuxLinux	4.18Affected before 4.18Not affected 4.19.254 through 4.19.Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

a86854d0c599b3202307abceb68feee4d7061578 to before 13596e6c9e541e90e5fc2c52b23f08b951370da9Affected
a86854d0c599b3202307abceb68feee4d7061578 to before 6194c021496addc11763d1ffa89ce5751889fe3cAffected
a86854d0c599b3202307abceb68feee4d7061578 to before 5694b162f275fb9a9f89422701b2b963be11e496Affected
a86854d0c599b3202307abceb68feee4d7061578 to before 44016a85419ca0d4f1e4d0127b330f8e4e2a57d0Affected
a86854d0c599b3202307abceb68feee4d7061578 to before 5595d30c4dc27d939635c3188c68203b6ece1711Affected
a86854d0c599b3202307abceb68feee4d7061578 to before c3b821e8e406d5650e587b7ac624ac24e9b780a8Affected

LinuxLinux

4.18Affected
before 4.18Not affected
4.19.254 through 4.19.*Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.