In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map Here is the BUG report by KASAN about null pointer dereference: BUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50 Read of size 1 at addr 0000000000000000 by task python3/2640 Call Trace: strcmp __of_find_property of_find_property pinctrl_dt_to_map kasprintf() would return NULL pointer when kmalloc() fail to allocate. So directly return ENOMEM, if kasprintf() return NULL pointer.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/040f726fecd88121f3b95e70369785ad452dddf9 cve-icon cve-icon
https://git.kernel.org/stable/c/5834a3a98cd266ad35a229923c0adbd0addc8d68 cve-icon cve-icon
https://git.kernel.org/stable/c/777430aa4ddccaa5accec6db90ffc1d47f00d471 cve-icon cve-icon
https://git.kernel.org/stable/c/91d5c5060ee24fe8da88cd585bb43b843d2f0dce cve-icon cve-icon
https://git.kernel.org/stable/c/97e5b508e96176f1a73888ed89df396d7041bfcb cve-icon cve-icon
https://git.kernel.org/stable/c/a988dcd3dd9e691c5ccc3324b209688f3b5453e9 cve-icon cve-icon
https://git.kernel.org/stable/c/aaf552c5d53abe4659176e099575fe870d2e4768 cve-icon cve-icon
https://git.kernel.org/stable/c/b4d9f55cd38435358bc16d580612bc0d798d7b4c cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025050137-CVE-2022-49832-d04a@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49832 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49832 cve-icon
History

Mon, 23 Jun 2025 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'}

Sat, 07 Jun 2025 03:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Fri, 02 May 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Thu, 01 May 2025 14:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map Here is the BUG report by KASAN about null pointer dereference: BUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50 Read of size 1 at addr 0000000000000000 by task python3/2640 Call Trace: strcmp __of_find_property of_find_property pinctrl_dt_to_map kasprintf() would return NULL pointer when kmalloc() fail to allocate. So directly return ENOMEM, if kasprintf() return NULL pointer.
Title pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-05-01T14:09:50.435Z

Updated: 2025-05-04T08:46:28.117Z

Reserved: 2025-05-01T14:05:17.228Z

Link: CVE-2022-49832

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-05-01T15:16:06.673

Modified: 2025-05-02T13:53:20.943

Link: CVE-2022-49832

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-05-01T00:00:00Z

Links: CVE-2022-49832 - Bugzilla