CVE-2022-49308

Source
https://cve.org/CVERecord?id=CVE-2022-49308
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49308.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49308
Downstream
Related
Published
2025-02-26T02:10:39.648Z
Modified
2026-04-11T12:43:51.912621Z
Summary
extcon: Modify extcon device to be created after driver data is set
Details

In the Linux kernel, the following vulnerability has been resolved:

extcon: Modify extcon device to be created after driver data is set

Currently, someone can invoke the sysfs such as stateshow() intermittently before devset_drvdata() is done. And it can be a cause of kernel Oops because of edev is Null at that time. So modified the driver registration to after setting drviver data.

  • Oops's backtrace.

Backtrace: [<c067865c>] (stateshow) from [<c05222e8>] (devattrshow) [<c05222c0>] (devattrshow) from [<c02c66e0>] (sysfskfseqshow) [<c02c6648>] (sysfskfseqshow) from [<c02c496c>] (kernfsseqshow) [<c02c4938>] (kernfsseqshow) from [<c025e2a0>] (seqread) [<c025e11c>] (seqread) from [<c02c50a0>] (kernfsfopread) [<c02c5064>] (kernfsfop_read) from [<c0231cac>] (__vfs_read) [<c0231c5c>] (__vfsread) from [<c0231ee0>] (vfsread) [<c0231e34>] (vfsread) from [<c0232464>] (ksysread) [<c02323f0>] (ksysread) from [<c02324fc>] (sysread) [<c02324e4>] (sys_read) from [<c00091d0>] (__systracereturn)

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49308.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
de55d8716ac50a356cea736c29bb7db5ac3d0190
Fixed
6e721f3ad0535b24f19a62420f4da95212cf069c
Fixed
cb81ea998c461868d1168411a867d8ffee12f23f
Fixed
d472c78cc82999d07bd09193a6718016ce9cd386
Fixed
abf3b222614f49f98e606fccdd269161c0d70204
Fixed
368e68ad6da4317fc4170e8d92b51c13d1bfe7a7
Fixed
35ff1ac55d301efb3f467cf5426faaeb3452994b
Fixed
033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c
Fixed
5dcc2afe716d69f5112ce035cb14f007461ff189

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49308.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.5.0
Fixed
4.14.283
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.247
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.198
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.122
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.47
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.17.15
Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
5.18.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49308.json"