CVE-2022-49262

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
26/02/2025
Last modified:
22/09/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> crypto: octeontx2 - remove CONFIG_DM_CRYPT check<br /> <br /> No issues were found while using the driver with dm-crypt enabled. So<br /> CONFIG_DM_CRYPT check in the driver can be removed.<br /> <br /> This also fixes the NULL pointer dereference in driver release if<br /> CONFIG_DM_CRYPT is enabled.<br /> <br /> ...<br /> Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008<br /> ...<br /> Call trace:<br /> crypto_unregister_alg+0x68/0xfc<br /> crypto_unregister_skciphers+0x44/0x60<br /> otx2_cpt_crypto_exit+0x100/0x1a0<br /> otx2_cptvf_remove+0xf8/0x200<br /> pci_device_remove+0x3c/0xd4<br /> __device_release_driver+0x188/0x234<br /> device_release_driver+0x2c/0x4c<br /> ...

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.12 (including) 5.15.33 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 5.16.19 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.17 (including) 5.17.2 (excluding)