CVE-2022-50276

power: supply: fix null pointer dereferencing in power_supply_get_battery_info

State
Published
Severity
Not scored
Published
Sep 15, 2025
Updated
May 11, 2026
Reserved
Sep 15, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

power: supply: fix null pointer dereferencing in power_supply_get_battery_info

when kmalloc() fail to allocate memory in kasprintf(), propname will be NULL, strcmp() called by of_get_property() will cause null pointer dereference.

So return ENOMEM if kasprintf() return NULL pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to before 8ea68b4e3fa9392ef9dae303abc8735a033c280fAffected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to before 5beadb55f4e36fafe5d6df5dcd5f85d803f3f134Affected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to before d21534ab4fd7883e1c8037a76671d4e8b6ea14cbAffected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to before 279af90e65cbdb3e5c4519b0043324d7876bc5ecAffected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to before b8131efb89d9f837c9244f900f0fc2699fd1181dAffected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to before 104bb8a663451404a26331263ce5b96c34504049Affected
LinuxLinux
  • 5.0Affected
  • before 5.0Not affected
  • 5.4.229 through 5.4.*Not affected
  • 5.10.163 through 5.10.*Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.