CVE-2022-49618

pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: Aug 15, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()

pdesc could be null but still dereference pdesc->name and it will lead to a null pointer access. So we move a null check before dereference.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	aa639e4437046a2519779932d8aa8842b517e20f to before ef1e38532f4b2f0f3b460e938a2e7076c3bed5eeAffected aa639e4437046a2519779932d8aa8842b517e20f to before 3cb392b64304a05bf647e2e44efacd9a1f3c3c6aAffected aa639e4437046a2519779932d8aa8842b517e20f to before e162a24f1dd06c0dcae71f2565c9f3da2827b98eAffected aa639e4437046a2519779932d8aa8842b517e20f to before 84a85d3fef2e75b1fe9fc2af6f5267122555a1edAffected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.132 through 5.10.Not affected 5.15.56 through 5.15.Not affected 5.18.13 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.