CVE-2022-49308
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/02/2025
Last modified:
21/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
extcon: Modify extcon device to be created after driver data is set<br />
<br />
Currently, someone can invoke the sysfs such as state_show()<br />
intermittently before dev_set_drvdata() is done.<br />
And it can be a cause of kernel Oops because of edev is Null at that time.<br />
So modified the driver registration to after setting drviver data.<br />
<br />
- Oops&#39;s backtrace.<br />
<br />
Backtrace:<br />
[] (state_show) from [] (dev_attr_show)<br />
[] (dev_attr_show) from [] (sysfs_kf_seq_show)<br />
[] (sysfs_kf_seq_show) from [] (kernfs_seq_show)<br />
[] (kernfs_seq_show) from [] (seq_read)<br />
[] (seq_read) from [] (kernfs_fop_read)<br />
[] (kernfs_fop_read) from [] (__vfs_read)<br />
[] (__vfs_read) from [] (vfs_read)<br />
[] (vfs_read) from [] (ksys_read)<br />
[] (ksys_read) from [] (sys_read)<br />
[] (sys_read) from [] (__sys_trace_return)
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.14.283 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.15 (including) | 4.19.247 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.20 (including) | 5.4.198 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.5 (including) | 5.10.122 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.47 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.17.15 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.18 (including) | 5.18.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c
- https://git.kernel.org/stable/c/35ff1ac55d301efb3f467cf5426faaeb3452994b
- https://git.kernel.org/stable/c/368e68ad6da4317fc4170e8d92b51c13d1bfe7a7
- https://git.kernel.org/stable/c/5dcc2afe716d69f5112ce035cb14f007461ff189
- https://git.kernel.org/stable/c/6e721f3ad0535b24f19a62420f4da95212cf069c
- https://git.kernel.org/stable/c/abf3b222614f49f98e606fccdd269161c0d70204
- https://git.kernel.org/stable/c/cb81ea998c461868d1168411a867d8ffee12f23f
- https://git.kernel.org/stable/c/d472c78cc82999d07bd09193a6718016ce9cd386



