CVE-2022-50364

i2c: mux: reg: check return value after calling platform_get_resource()

State: Published
Severity: 5.5 Medium
Published: Sep 17, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: mux: reg: check return value after calling platform_get_resource()

It will cause null-ptr-deref in resource_size(), if platform_get_resource() returns NULL, move calling resource_size() after devm_ioremap_resource() that will check 'res' to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	b3fdd32799d834e2626fae087906e886037350c6 to before 61df25c41b8e0d2c988ccf17139f70075a2e1ba4Affected b3fdd32799d834e2626fae087906e886037350c6 to before 8212800943997fab61874550278d653cb378c60cAffected b3fdd32799d834e2626fae087906e886037350c6 to before f5049b3ad9446203b916ee375f30fa217735f63aAffected b3fdd32799d834e2626fae087906e886037350c6 to before f7a440c89b6d460154efeb058272760e41bdfea8Affected b3fdd32799d834e2626fae087906e886037350c6 to before 2d47b79d2bd39cc6369eccf94a06568d84c906aeAffected
LinuxLinux	4.3Affected before 4.3Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

b3fdd32799d834e2626fae087906e886037350c6 to before 61df25c41b8e0d2c988ccf17139f70075a2e1ba4Affected
b3fdd32799d834e2626fae087906e886037350c6 to before 8212800943997fab61874550278d653cb378c60cAffected
b3fdd32799d834e2626fae087906e886037350c6 to before f5049b3ad9446203b916ee375f30fa217735f63aAffected
b3fdd32799d834e2626fae087906e886037350c6 to before f7a440c89b6d460154efeb058272760e41bdfea8Affected
b3fdd32799d834e2626fae087906e886037350c6 to before 2d47b79d2bd39cc6369eccf94a06568d84c906aeAffected

LinuxLinux

4.3Affected
before 4.3Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.