CVE-2022-49832 Details
Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map Here is the BUG report by KASAN about null pointer dereference: BUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50 Read of size 1 at addr 0000000000000000 by task python3/2640 Call Trace: strcmp __of_find_property of_find_property pinctrl_dt_to_map kasprintf() would return NULL pointer when kmalloc() fail to allocate. So directly return ENOMEM, if kasprintf() return NULL pointer.
A null pointer dereference vulnerability has been identified in the Linux kernel's pinctrl device tree handling. This issue arises in the 'pinctrl_dt_to_map' function, where a failure in memory allocation can lead to a null pointer being dereferenced, causing a crash. The vulnerability was reported by KASAN, which detected the null pointer dereference during a string comparison operation. The issue occurs when 'kasprintf' fails to allocate memory, returning a null pointer that is not properly handled, leading to a dereference of a null address.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/040f726fecd88121f3b95e70369785ad452dddf9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5834a3a98cd266ad35a229923c0adbd0addc8d68 | kernel.org | Patch |
| https://git.kernel.org/stable/c/777430aa4ddccaa5accec6db90ffc1d47f00d471 | kernel.org | Patch |
| https://git.kernel.org/stable/c/91d5c5060ee24fe8da88cd585bb43b843d2f0dce | kernel.org | Patch |
| https://git.kernel.org/stable/c/97e5b508e96176f1a73888ed89df396d7041bfcb | kernel.org | Patch |
| https://git.kernel.org/stable/c/a988dcd3dd9e691c5ccc3324b209688f3b5453e9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/aaf552c5d53abe4659176e099575fe870d2e4768 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b4d9f55cd38435358bc16d580612bc0d798d7b4c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.5, < 4.9.334 >= 4.10, < 4.14.300 >= 4.15, < 4.19.267 >= 4.20, < 5.4.225 >= 5.5, < 5.10.156 >= 5.11, < 5.15.80 >= 5.16, < 6.0.10 6.1 rc1 6.1 rc2 6.1 rc3 6.1 rc4 6.1 rc5 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 10, 2025 | Initial Analysis | [email protected] |
| May 1, 2025 | New CVE Received | kernel.org |