CVE-2022-49608

Source
https://cve.org/CVERecord?id=CVE-2022-49608
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49608.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49608
Downstream
Published
2025-02-26T02:23:32.309Z
Modified
2026-05-28T03:55:00.462107012Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
pinctrl: ralink: Check for null return of devm_kcalloc
Details

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: ralink: Check for null return of devm_kcalloc

Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49608.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a86854d0c599b3202307abceb68feee4d7061578
Fixed
13596e6c9e541e90e5fc2c52b23f08b951370da9
Fixed
6194c021496addc11763d1ffa89ce5751889fe3c
Fixed
5694b162f275fb9a9f89422701b2b963be11e496
Fixed
44016a85419ca0d4f1e4d0127b330f8e4e2a57d0
Fixed
5595d30c4dc27d939635c3188c68203b6ece1711
Fixed
c3b821e8e406d5650e587b7ac624ac24e9b780a8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49608.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.18.0
Fixed
4.19.254
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.208
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.134
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.58
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.15

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49608.json"