CVE-2022-49806

net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start()

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start()

sparx_stats_init() calls create_singlethread_workqueue() and not checked the ret value, which may return NULL. And a null-ptr-deref may happen:

sparx_stats_init() create_singlethread_workqueue() # failed, sparx5->stats_queue is NULL queue_delayed_work() queue_delayed_work_on() __queue_delayed_work() # warning here, but continue __queue_work() # access wq->flags, null-ptr-deref

Check the ret value and return -ENOMEM if it is NULL. So as sparx5_start().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b37a1bae742f92cc9b1f777d54e04ee3d86bbfc2 to before 80e590aeb132887102c3fa79d99b338f099dc952Affected
  • b37a1bae742f92cc9b1f777d54e04ee3d86bbfc2 to before 456327e565dc49d18b2f595f39f47df8a36f1057Affected
  • b37a1bae742f92cc9b1f777d54e04ee3d86bbfc2 to before 639f5d006e36bb303f525d9479448c412b720c39Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.80 through 5.15.*Not affected
  • 6.0.10 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.