CVE-2022-49019

Source
https://cve.org/CVERecord?id=CVE-2022-49019
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49019.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49019
Downstream
Related
Published
2024-10-21T20:06:27.306Z
Modified
2026-04-11T12:43:26.264574Z
Summary
net: ethernet: nixge: fix NULL dereference
Details

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: nixge: fix NULL dereference

In function nixgehwdmabdrelease() dereference of NULL pointer priv->rxbdv is possible for the case of its allocation failure in nixgehwdmabdinit().

Move for() loop with priv->rxbdv dereference under the check for its validity.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49019.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
492caffa8a1a405f661c111acabfe6b8b9645db8
Fixed
910c0264b64ef2dad8887714a7c56c93e39a0ed3
Fixed
45752af0247589e6d3dede577415bfe117b4392c
Fixed
9c584d6d9cfb935dce8fc81a4c26debac0a3049b
Fixed
80e82f7b440b65cf131dce10f487dc73a7046e6b
Fixed
9256db4e45e8b497b0e993cc3ed4ad08eb2389b6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49019.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.17.0
Fixed
5.4.226
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.158
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.82
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.12

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49019.json"