CVE-2022-49731
published 2025-02-26CVE-2022-49731: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
In an unlikely (and probably wrong?) case that the 'ppi' parameter of
ata_host_alloc_pinfo() points to an array starting with a NULL pointer,
there's going to be a kernel oops as the 'pi' local variable won't get
reassigned from the initial value of NULL. Initialize 'pi' instead to
'&ata_dummy_port_info' to fix the possible kernel oops for good...
Found by Linux Verification Center (linuxtesting.org) with the SVACE static
analysis tool.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= f5cda257296fbd3683b1f568f2d94d3caaacf74d < ca4693e6e06e4fd2b240c0fec47aa2498c94848e | ca4693e6e06e4fd2b240c0fec47aa2498c94848e |
| linux | linux | >= f5cda257296fbd3683b1f568f2d94d3caaacf74d < 1ac5efee33f29e704226506d429b84575a5d66f8 | 1ac5efee33f29e704226506d429b84575a5d66f8 |
| linux | linux | >= f5cda257296fbd3683b1f568f2d94d3caaacf74d < a810bd5af06977a847d1f202b22d7defd5c62497 | a810bd5af06977a847d1f202b22d7defd5c62497 |
| linux | linux | >= f5cda257296fbd3683b1f568f2d94d3caaacf74d < 253334f84c81bc6a43af489f108c0bddad989eef | 253334f84c81bc6a43af489f108c0bddad989eef |
| linux | linux | >= f5cda257296fbd3683b1f568f2d94d3caaacf74d < 36cd19e7d4e5571d77a2ed20c5b6ef50cf57734a | 36cd19e7d4e5571d77a2ed20c5b6ef50cf57734a |
| linux | linux | >= f5cda257296fbd3683b1f568f2d94d3caaacf74d < ff128fbea720bf763fa345680dda5f050bc24a47 | ff128fbea720bf763fa345680dda5f050bc24a47 |
| linux | linux | >= f5cda257296fbd3683b1f568f2d94d3caaacf74d < 07cbdb4807d369fbda73062a91b570c4dc5ec429 | 07cbdb4807d369fbda73062a91b570c4dc5ec429 |
| linux | linux | >= f5cda257296fbd3683b1f568f2d94d3caaacf74d < bf476fe22aa1851bab4728e0c49025a6a0bea307 | bf476fe22aa1851bab4728e0c49025a6a0bea307 |
| linux | linux_kernel | < 4.9.320 | 4.9.320 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.127-1 | 5.10.127-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 4.10 < 4.14.285 | 4.14.285 |
| linux | linux_kernel | >= 4.15 < 4.19.249 | 4.19.249 |
| linux | linux_kernel | >= 4.20 < 5.4.200 | 5.4.200 |
| linux | linux_kernel | >= 5.11 < 5.15.49 | 5.15.49 |
| linux | linux_kernel | >= 5.16 < 5.18.6 | 5.18.6 |
| linux | linux_kernel | >= 5.5 < 5.10.124 | 5.10.124 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x8fr-74rg-389v: In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
In an unlikel
ghsa_unreviewed·2025-03-07
CVE-2022-49731 [MEDIUM] CWE-476 GHSA-x8fr-74rg-389v: In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
In an unlikel
In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
In an unlikely (and probably wrong?) case that the 'ppi' parameter of
ata_host_alloc_pinfo() points to an array starting with a NULL pointer,
there's going to be a kernel oops as the 'pi' local variable won't get
reassigned from the initial value of NULL. Initialize 'pi' instead to
'&ata_dummy_port_info' to fix the possible kernel oops for good...
Found by Linux Verification Center (linuxtesting.org) with the SVACE static
analysis tool.
OSV
CVE-2022-49731: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely
osv·2025-02-26·CVSS 5.5
CVE-2022-49731 [MEDIUM] CVE-2022-49731: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and probably wrong?) case that the 'ppi' parameter of ata_host_alloc_pinfo() points to an array starting with a NULL pointer, there's going to be a kernel oops as the 'pi' local variable won't get reassigned from the initial value of NULL. Initialize 'pi' instead to '&ata_dummy_port_info' to fix the possible kernel oops for good... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
Red Hat
kernel: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49731 [MEDIUM] CWE-476 kernel: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
kernel: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
In an unlikely (and probably wrong?) case that the 'ppi' parameter of
ata_host_alloc_pinfo() points to an array starting with a NULL pointer,
there's going to be a kernel oops as the 'pi' local variable won't get
reassigned from the initial value of NULL. Initialize 'pi' instead to
'&ata_dummy_port_info' to fix the possible kernel oops for good...
Found by Linux Verification Center (linuxtesting.org) with the SVACE static
analysis tool.
A flaw was found in the libata module in the Linux kernel. A NULL pointer dereference can be triggered in the unlikely case that the PPI, an array
Debian
CVE-2022-49731: linux - In the Linux kernel, the following vulnerability has been resolved: ata: libata...
vendor_debian·2022·CVSS 5.5
CVE-2022-49731 [MEDIUM] CVE-2022-49731: linux - In the Linux kernel, the following vulnerability has been resolved: ata: libata...
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and probably wrong?) case that the 'ppi' parameter of ata_host_alloc_pinfo() points to an array starting with a NULL pointer, there's going to be a kernel oops as the 'pi' local variable won't get reassigned from the initial value of NULL. Initialize 'pi' instead to '&ata_dummy_port_info' to fix the possible kernel oops for good... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
Scope: local
bookworm: resolved (fixed in 5.18.14-1)
bullseye: resolved (fixed in 5.10.127-1)
forky: resolved (fixed in 5.18.14-1)
sid: resolved (fixed in 5.18.14-1)
trixie: resolved (fixed in 5.18.14-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/07cbdb4807d369fbda73062a91b570c4dc5ec429https://git.kernel.org/stable/c/1ac5efee33f29e704226506d429b84575a5d66f8https://git.kernel.org/stable/c/253334f84c81bc6a43af489f108c0bddad989eefhttps://git.kernel.org/stable/c/36cd19e7d4e5571d77a2ed20c5b6ef50cf57734ahttps://git.kernel.org/stable/c/a810bd5af06977a847d1f202b22d7defd5c62497https://git.kernel.org/stable/c/bf476fe22aa1851bab4728e0c49025a6a0bea307https://git.kernel.org/stable/c/ca4693e6e06e4fd2b240c0fec47aa2498c94848ehttps://git.kernel.org/stable/c/ff128fbea720bf763fa345680dda5f050bc24a47
2025-02-26
Published