CVE-2022-50634
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
09/12/2025
Última modificación:
09/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe()<br />
<br />
cw_bat_probe() calls create_singlethread_workqueue() and not checked the<br />
ret value, which may return NULL. And a null-ptr-deref may happen:<br />
<br />
cw_bat_probe()<br />
create_singlethread_workqueue() # failed, cw_bat->wq is NULL<br />
queue_delayed_work()<br />
queue_delayed_work_on()<br />
__queue_delayed_work() # warning here, but continue<br />
__queue_work() # access wq->flags, null-ptr-deref<br />
<br />
Check the ret value and return -ENOMEM if it is NULL.



