CVE-2022-49449

MEDIUM

Linux Kernel - Null Pointer Dereference in pinctrl renesas rzn1 sh_pfc_map_resources

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Scores

CVSS v3 5.5
EPSS 0.0025
EPSS Percentile 15.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (17)
linux/Kernel 4.20.0 - 5.10.121linux
linux/Kernel 5.11.0 - 5.15.46linux
linux/Kernel 5.16.0 - 5.17.14linux
linux/Kernel 5.18.0 - 5.18.3linux
Linux/Linux < 4.20
Linux/Linux 4.20
Linux/Linux 4e53b5004745ef26a37bca4933b2d3ea71313f2a - 01f9e02e0f13df3fd291676dc80054e977be1601
Linux/Linux 4e53b5004745ef26a37bca4933b2d3ea71313f2a - 2f661477c2bb8068194dbba9738d05219f111c6e
Linux/Linux 4e53b5004745ef26a37bca4933b2d3ea71313f2a - 34c719b8fdfbd0c7c54cae56e6b0f16e9f8bf03e
Linux/Linux 4e53b5004745ef26a37bca4933b2d3ea71313f2a - b646e0cfeb38bf5f1944fd548f1dfa9b129fa00c
... and 7 more
Published Feb 26, 2025
Tracked Since Feb 18, 2026