CVE-2022-49010

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> hwmon: (coretemp) Check for null before removing sysfs attrs<br /> <br /> If coretemp_add_core() gets an error then pdata-&gt;core_data[indx]<br /> is already NULL and has been kfreed. Don&amp;#39;t pass that to<br /> sysfs_remove_group() as that will crash in sysfs_remove_group().<br /> <br /> [Shortened for readability]<br /> [91854.020159] sysfs: cannot create duplicate filename &amp;#39;/devices/platform/coretemp.0/hwmon/hwmon2/temp20_label&amp;#39;<br /> <br /> [91855.126115] BUG: kernel NULL pointer dereference, address: 0000000000000188<br /> [91855.165103] #PF: supervisor read access in kernel mode<br /> [91855.194506] #PF: error_code(0x0000) - not-present page<br /> [91855.224445] PGD 0 P4D 0<br /> [91855.238508] Oops: 0000 [#1] PREEMPT SMP PTI<br /> ...<br /> [91855.342716] RIP: 0010:sysfs_remove_group+0xc/0x80<br /> ...<br /> [91855.796571] Call Trace:<br /> [91855.810524] coretemp_cpu_offline+0x12b/0x1dd [coretemp]<br /> [91855.841738] ? coretemp_cpu_online+0x180/0x180 [coretemp]<br /> [91855.871107] cpuhp_invoke_callback+0x105/0x4b0<br /> [91855.893432] cpuhp_thread_fun+0x8e/0x150<br /> ...<br /> <br /> Fix this by checking for NULL first.