CVE-2022-49273

Source
https://cve.org/CVERecord?id=CVE-2022-49273
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49273.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49273
Downstream
Related
Published
2025-02-26T01:56:19.110Z
Modified
2026-03-12T03:24:55.537292Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
rtc: pl031: fix rtc features null pointer dereference
Details

In the Linux kernel, the following vulnerability has been resolved:

rtc: pl031: fix rtc features null pointer dereference

When there is no interrupt line, rtc alarm feature is disabled.

The clearing of the alarm feature bit was being done prior to allocations of ldata->rtc device, resulting in a null pointer dereference.

Clear RTCFEATUREALARM after the rtc device is allocated.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49273.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d9b0dd54a1943f47a381a474f8ea2c94466110c0
Fixed
cd2722e411e8ab7e5ae41102f6925fa13dffdac5
Fixed
d274ce4a3dfd0b9a292667535578359b865765cb
Fixed
1b915703964f7e636961df04c540261dc55c6c70
Fixed
ea6af39f3da50c86367a71eb3cc674ade3ed244c

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49273.json"