cbcvebase.
CVE-2022-49435
published 2025-02-26

CVE-2022-49435: In the Linux kernel, the following vulnerability has been resolved: mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() It will cause…

PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.3th percentile
In the Linux kernel, the following vulnerability has been resolved: mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= b5e29aa880be84c271be8d0726cec4018bfbfd74 < 49c1e32e7b3f301642a60448700ec531df98126949c1e32e7b3f301642a60448700ec531df981269
linuxlinux>= b5e29aa880be84c271be8d0726cec4018bfbfd74 < a1d4941d9a24999f680799f9bbde7f57351ca637a1d4941d9a24999f680799f9bbde7f57351ca637
linuxlinux>= b5e29aa880be84c271be8d0726cec4018bfbfd74 < 5289795824b77489803b0802cd9edc13824a2d0b5289795824b77489803b0802cd9edc13824a2d0b
linuxlinux>= b5e29aa880be84c271be8d0726cec4018bfbfd74 < 2d00158a06efe6bbcd020108634ea0f2ed8b32f72d00158a06efe6bbcd020108634ea0f2ed8b32f7
linuxlinux>= b5e29aa880be84c271be8d0726cec4018bfbfd74 < 579944b9f38727d9ff570b58f83bc424e8af8398579944b9f38727d9ff570b58f83bc424e8af8398
linuxlinux>= b5e29aa880be84c271be8d0726cec4018bfbfd74 < 311242c7703df0da14c206260b7e855f69cb0264311242c7703df0da14c206260b7e855f69cb0264
linuxlinux_kernel>= 0 < 5.10.127-15.10.127-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 5.11 < 5.15.465.15.46
linuxlinux_kernel>= 5.16 < 5.17.145.17.14
linuxlinux_kernel>= 5.18 < 5.18.35.18.3
linuxlinux_kernel>= 5.4 < 5.4.1985.4.198
linuxlinux_kernel>= 5.5 < 5.10.1215.10.121

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.