CVE-2022-49618

Source
https://cve.org/CVERecord?id=CVE-2022-49618
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49618.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49618
Downstream
Related
Published
2025-02-26T02:23:37.185Z
Modified
2026-04-11T12:44:18.029771Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()
Details

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: aspeed: Fix potential NULL dereference in aspeedpinmuxset_mux()

pdesc could be null but still dereference pdesc->name and it will lead to a null pointer access. So we move a null check before dereference.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49618.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4d3d0e4272d8d660f5f14f5abcf96fb4df1aa94b
Fixed
ef1e38532f4b2f0f3b460e938a2e7076c3bed5ee
Fixed
3cb392b64304a05bf647e2e44efacd9a1f3c3c6a
Fixed
e162a24f1dd06c0dcae71f2565c9f3da2827b98e
Fixed
84a85d3fef2e75b1fe9fc2af6f5267122555a1ed

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49618.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.9.0
Fixed
5.10.132
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.56
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.13

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49618.json"