CVE-2022-49832

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2025
Last modified:
02/05/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map<br /> <br /> Here is the BUG report by KASAN about null pointer dereference:<br /> <br /> BUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50<br /> Read of size 1 at addr 0000000000000000 by task python3/2640<br /> Call Trace:<br /> strcmp<br /> __of_find_property<br /> of_find_property<br /> pinctrl_dt_to_map<br /> <br /> kasprintf() would return NULL pointer when kmalloc() fail to allocate.<br /> So directly return ENOMEM, if kasprintf() return NULL pointer.

Impact