cbcvebase.
CVE-2022-49494
published 2025-02-26

CVE-2022-49494: In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() It will cause…

PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
18.0th percentile
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 81f1ddffdc22ca5789e33b9d4712914e302090c181f1ddffdc22ca5789e33b9d4712914e302090c1
linuxlinux>= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 0cfee868b89ffa945f3d535ee5c985cb40c5a0f80cfee868b89ffa945f3d535ee5c985cb40c5a0f8
linuxlinux>= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 069af5e27c1b0f7677ef76d8d3102e503ca4f80b069af5e27c1b0f7677ef76d8d3102e503ca4f80b
linuxlinux>= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 13b60d3dc84b47307669edb66b633b18466014b413b60d3dc84b47307669edb66b633b18466014b4
linuxlinux>= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < a28ed09dafee20da51eb26452950839633afd824a28ed09dafee20da51eb26452950839633afd824
linuxlinux_kernel>= 0 < 5.10.127-15.10.127-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 5.11 < 5.15.465.15.46
linuxlinux_kernel>= 5.16 < 5.17.145.17.14
linuxlinux_kernel>= 5.18 < 5.18.35.18.3
linuxlinux_kernel>= 5.5 < 5.10.1215.10.121

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.