Riskcovery

CVE-2022-49962

xhci: Fix null pointer dereference in remove if xHC has only one roothub

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xhci: Fix null pointer dereference in remove if xHC has only one roothub

The remove path in xhci platform driver tries to remove and put both main and shared hcds even if only a main hcd exists (one roothub)

This causes a null pointer dereference in reboot for those controllers.

Check that the shared_hcd exists before trying to remove it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e0fe986972f5b6b12086c73569206dd29c520be9 to before 7081b2f34ff291ada012bd6abacaf7d51c4cf73fAffected
  • e0fe986972f5b6b12086c73569206dd29c520be9 to before 4a593a62a9e3a25ab4bc37f612e4edec144f7f43Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 5.19.8 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.