CVE-2022-49832

Source
https://cve.org/CVERecord?id=CVE-2022-49832
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49832.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49832
Downstream
Related
Published
2025-05-01T14:09:50.435Z
Modified
2026-03-12T03:25:51.799550Z
Summary
pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
Details

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: devicetree: fix null pointer dereferencing in pinctrldtto_map

Here is the BUG report by KASAN about null pointer dereference:

BUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50 Read of size 1 at addr 0000000000000000 by task python3/2640 Call Trace: strcmp _offindproperty offindproperty pinctrldttomap

kasprintf() would return NULL pointer when kmalloc() fail to allocate. So directly return ENOMEM, if kasprintf() return NULL pointer.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49832.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
57291ce295c0aca738dd284c4a9c591c09ebee71
Fixed
aaf552c5d53abe4659176e099575fe870d2e4768
Fixed
b4d9f55cd38435358bc16d580612bc0d798d7b4c
Fixed
a988dcd3dd9e691c5ccc3324b209688f3b5453e9
Fixed
040f726fecd88121f3b95e70369785ad452dddf9
Fixed
777430aa4ddccaa5accec6db90ffc1d47f00d471
Fixed
97e5b508e96176f1a73888ed89df396d7041bfcb
Fixed
5834a3a98cd266ad35a229923c0adbd0addc8d68
Fixed
91d5c5060ee24fe8da88cd585bb43b843d2f0dce

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49832.json"