CVE-2022-49262
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
26/02/2025
Last modified:
22/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
crypto: octeontx2 - remove CONFIG_DM_CRYPT check<br />
<br />
No issues were found while using the driver with dm-crypt enabled. So<br />
CONFIG_DM_CRYPT check in the driver can be removed.<br />
<br />
This also fixes the NULL pointer dereference in driver release if<br />
CONFIG_DM_CRYPT is enabled.<br />
<br />
...<br />
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008<br />
...<br />
Call trace:<br />
crypto_unregister_alg+0x68/0xfc<br />
crypto_unregister_skciphers+0x44/0x60<br />
otx2_cpt_crypto_exit+0x100/0x1a0<br />
otx2_cptvf_remove+0xf8/0x200<br />
pci_device_remove+0x3c/0xd4<br />
__device_release_driver+0x188/0x234<br />
device_release_driver+0x2c/0x4c<br />
...
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.12 (including) | 5.15.33 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.16.19 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.17 (including) | 5.17.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



