CVE-2022-50503

mtd: lpddr2_nvm: Fix possible null-ptr-deref

State: Published
Severity: Not scored
Published: Oct 4, 2025
Updated: May 11, 2026
Reserved: Oct 4, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: lpddr2_nvm: Fix possible null-ptr-deref

It will cause null-ptr-deref when resource_size(add_range) invoked, if platform_get_resource() returns NULL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before 4d10bd7416e8383340b5524b8d616b8ad01ef1e1Affected 96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before bb9ccb6121ec4140d366147aa866ceb5a21a8d3dAffected 96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before e6aafb57d90ff2c1e18554f3a3c36247a59825ceAffected 96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before 8eb64dc5a790a529ef49ec94b3337af09dac15d3Affected 96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before 0919982a1744346269320615615c7deb14106661Affected 96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before e0d3e46ac6669cdf1b99bc7b7d92f1221b9a1ff2Affected 96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before f82f63b3911f1b2da68a14d9c4babf3b55feca55Affected 96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before c4cc41e94d8357f5f02b8ef40257bb23931d8438Affected 96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before 6bdd45d795adf9e73b38ced5e7f750cd199499ffAffected
LinuxLinux	3.16Affected before 3.16Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before 4d10bd7416e8383340b5524b8d616b8ad01ef1e1Affected
96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before bb9ccb6121ec4140d366147aa866ceb5a21a8d3dAffected
96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before e6aafb57d90ff2c1e18554f3a3c36247a59825ceAffected
96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before 8eb64dc5a790a529ef49ec94b3337af09dac15d3Affected
96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before 0919982a1744346269320615615c7deb14106661Affected
96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before e0d3e46ac6669cdf1b99bc7b7d92f1221b9a1ff2Affected
96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before f82f63b3911f1b2da68a14d9c4babf3b55feca55Affected
96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before c4cc41e94d8357f5f02b8ef40257bb23931d8438Affected
96ba9dd65788a0bd2a7d1e57ec78b7642f0ccc25 to before 6bdd45d795adf9e73b38ced5e7f750cd199499ffAffected

LinuxLinux

3.16Affected
before 3.16Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.