CVE-2022-49010
published 2024-10-21CVE-2022-49010: In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Check for null before removing sysfs attrs If coretemp_add_core() gets an…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
14.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (coretemp) Check for null before removing sysfs attrs
If coretemp_add_core() gets an error then pdata->core_data[indx]
is already NULL and has been kfreed. Don't pass that to
sysfs_remove_group() as that will crash in sysfs_remove_group().
[Shortened for readability]
[91854.020159] sysfs: cannot create duplicate filename '/devices/platform/coretemp.0/hwmon/hwmon2/temp20_label'
[91855.126115] BUG: kernel NULL pointer dereference, address: 0000000000000188
[91855.165103] #PF: supervisor read access in kernel mode
[91855.194506] #PF: error_code(0x0000) - not-present page
[91855.224445] PGD 0 P4D 0
[91855.238508] Oops: 0000 [#1] PREEMPT SMP PTI
...
[91855.342716] RIP: 0010:sysfs_remove_group+0xc/0x80
...
[91855.796571] Call Trace:
[91855.810524] coretemp_cpu_offline+0x12b/0x1dd [coretemp]
[91855.841738] ? coretemp_cpu_online+0x180/0x180 [coretemp]
[91855.871107] cpuhp_invoke_callback+0x105/0x4b0
[91855.893432] cpuhp_thread_fun+0x8e/0x150
...
Fix this by checking for NULL first.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.12-1 (bookworm) | linux 6.0.12-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 199e0de7f5df31a4fc485d4aaaf8a07718252ace < fb503d077ff7b43913503eaf72995d1239028b99 | fb503d077ff7b43913503eaf72995d1239028b99 |
| linux | linux | >= 199e0de7f5df31a4fc485d4aaaf8a07718252ace < 070d5ea4a0592a37ad96ce7f7b6b024f90bb009f | 070d5ea4a0592a37ad96ce7f7b6b024f90bb009f |
| linux | linux | >= 199e0de7f5df31a4fc485d4aaaf8a07718252ace < 280110db1a7d62ad635b103bafc3ae96e8bef75c | 280110db1a7d62ad635b103bafc3ae96e8bef75c |
| linux | linux | >= 199e0de7f5df31a4fc485d4aaaf8a07718252ace < 89eecabe6a47403237f45aafd7d24f93cb973653 | 89eecabe6a47403237f45aafd7d24f93cb973653 |
| linux | linux | >= 199e0de7f5df31a4fc485d4aaaf8a07718252ace < f06e0cd01eab954bd5f2190c9faa79bb5357e05b | f06e0cd01eab954bd5f2190c9faa79bb5357e05b |
| linux | linux | >= 199e0de7f5df31a4fc485d4aaaf8a07718252ace < 7692700ac818866d138a8de555130a6e70e6ac16 | 7692700ac818866d138a8de555130a6e70e6ac16 |
| linux | linux | >= 199e0de7f5df31a4fc485d4aaaf8a07718252ace < ae6c8b6e5d5628df1c475c0a8fca1465e205c95b | ae6c8b6e5d5628df1c475c0a8fca1465e205c95b |
| linux | linux | >= 199e0de7f5df31a4fc485d4aaaf8a07718252ace < a89ff5f5cc64b9fe7a992cf56988fd36f56ca82a | a89ff5f5cc64b9fe7a992cf56988fd36f56ca82a |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 3.0 < 4.9.335 | 4.9.335 |
| linux | linux_kernel | >= 4.10 < 4.14.301 | 4.14.301 |
| linux | linux_kernel | >= 4.15 < 4.19.268 | 4.19.268 |
| linux | linux_kernel | >= 4.20 < 5.4.226 | 5.4.226 |
| linux | linux_kernel | >= 5.11 < 5.15.82 | 5.15.82 |
| linux | linux_kernel | >= 5.16 < 6.0.12 | 6.0.12 |
| linux | linux_kernel | >= 5.5 < 5.10.158 | 5.10.158 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-49010: In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Check for null before removing sysfs attrs If coretemp_add_core(
osv·2024-10-21·CVSS 5.5
CVE-2022-49010 [MEDIUM] CVE-2022-49010: In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Check for null before removing sysfs attrs If coretemp_add_core(
In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Check for null before removing sysfs attrs If coretemp_add_core() gets an error then pdata->core_data[indx] is already NULL and has been kfreed. Don't pass that to sysfs_remove_group() as that will crash in sysfs_remove_group(). [Shortened for readability] [91854.020159] sysfs: cannot create duplicate filename '/devices/platform/coretemp.0/hwmon/hwmon2/temp20_label' [91855.126115] BUG: kernel NULL pointer dereference, address: 0000000000000188 [91855.165103] #PF: supervisor read access in kernel mode [91855.194506] #PF: error_code(0x0000) - not-present page [91855.224445] PGD 0 P4D 0 [91855.238508] Oops: 0000 [#1] PREEMPT SMP PTI ... [91855.342716] RIP: 0010:sysfs_remove_group+0xc/0x80 ... [91855.796571]
GHSA
GHSA-44c5-jqqx-f38c: In the Linux kernel, the following vulnerability has been resolved:
hwmon: (coretemp) Check for null before removing sysfs attrs
If coretemp_add_cor
ghsa_unreviewed·2024-10-21
CVE-2022-49010 [MEDIUM] CWE-476 GHSA-44c5-jqqx-f38c: In the Linux kernel, the following vulnerability has been resolved:
hwmon: (coretemp) Check for null before removing sysfs attrs
If coretemp_add_cor
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (coretemp) Check for null before removing sysfs attrs
If coretemp_add_core() gets an error then pdata->core_data[indx]
is already NULL and has been kfreed. Don't pass that to
sysfs_remove_group() as that will crash in sysfs_remove_group().
[Shortened for readability]
[91854.020159] sysfs: cannot create duplicate filename '/devices/platform/coretemp.0/hwmon/hwmon2/temp20_label'
[91855.126115] BUG: kernel NULL pointer dereference, address: 0000000000000188
[91855.165103] #PF: supervisor read access in kernel mode
[91855.194506] #PF: error_code(0x0000) - not-present page
[91855.224445] PGD 0 P4D 0
[91855.238508] Oops: 0000 [#1] PREEMPT SMP PTI
...
[91855.342716] RIP: 0010:sysfs_remove_group+0xc/0x80
...
[91855.7965
Red Hat
kernel: hwmon: (coretemp) Check for null before removing sysfs attrs
vendor_redhat·2024-10-21·CVSS 5.5
CVE-2022-49010 [MEDIUM] CWE-476 kernel: hwmon: (coretemp) Check for null before removing sysfs attrs
kernel: hwmon: (coretemp) Check for null before removing sysfs attrs
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (coretemp) Check for null before removing sysfs attrs
If coretemp_add_core() gets an error then pdata->core_data[indx]
is already NULL and has been kfreed. Don't pass that to
sysfs_remove_group() as that will crash in sysfs_remove_group().
[Shortened for readability]
[91854.020159] sysfs: cannot create duplicate filename '/devices/platform/coretemp.0/hwmon/hwmon2/temp20_label'
[91855.126115] BUG: kernel NULL pointer dereference, address: 0000000000000188
[91855.165103] #PF: supervisor read access in kernel mode
[91855.194506] #PF: error_code(0x0000) - not-present page
[91855.224445] PGD 0 P4D 0
[91855.238508] Oops: 0000 [#1] PREEMPT SMP PTI
...
[
Debian
CVE-2022-49010: linux - In the Linux kernel, the following vulnerability has been resolved: hwmon: (cor...
vendor_debian·2022·CVSS 5.5
CVE-2022-49010 [MEDIUM] CVE-2022-49010: linux - In the Linux kernel, the following vulnerability has been resolved: hwmon: (cor...
In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Check for null before removing sysfs attrs If coretemp_add_core() gets an error then pdata->core_data[indx] is already NULL and has been kfreed. Don't pass that to sysfs_remove_group() as that will crash in sysfs_remove_group(). [Shortened for readability] [91854.020159] sysfs: cannot create duplicate filename '/devices/platform/coretemp.0/hwmon/hwmon2/temp20_label' [91855.126115] BUG: kernel NULL pointer dereference, address: 0000000000000188 [91855.165103] #PF: supervisor read access in kernel mode [91855.194506] #PF: error_code(0x0000) - not-present page [91855.224445] PGD 0 P4D 0 [91855.238508] Oops: 0000 [#1] PREEMPT SMP PTI ... [91855.342716] RIP: 0010:sysfs_remove_group+0xc/0x80 ... [91855.796571]
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/070d5ea4a0592a37ad96ce7f7b6b024f90bb009fhttps://git.kernel.org/stable/c/280110db1a7d62ad635b103bafc3ae96e8bef75chttps://git.kernel.org/stable/c/7692700ac818866d138a8de555130a6e70e6ac16https://git.kernel.org/stable/c/89eecabe6a47403237f45aafd7d24f93cb973653https://git.kernel.org/stable/c/a89ff5f5cc64b9fe7a992cf56988fd36f56ca82ahttps://git.kernel.org/stable/c/ae6c8b6e5d5628df1c475c0a8fca1465e205c95bhttps://git.kernel.org/stable/c/f06e0cd01eab954bd5f2190c9faa79bb5357e05bhttps://git.kernel.org/stable/c/fb503d077ff7b43913503eaf72995d1239028b99
2024-10-21
Published