Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-48879

efi: fix NULL-deref in init error path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have been disabled, the runtime services workqueue will never have been allocated. Do not try to destroy the workqueue unconditionally in the unlikely event that EFI initialisation fails to avoid dereferencing a NULL pointer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2ff3c97b47521d6700cc6485c7935908dcd2c27c to < 585a0b2b3ae7903c6abee3087d09c69e955a7794affected
  • 5167f194da6947e19a3e970485ee3ccb44f7958d to < 5fcf75a8a4c3e7ee9122d143684083c9faf20452affected
  • 98086df8b70c06234a8f4290c46064e44dafa0ed to < 4ca71bc0e1995d15486cd7b60845602a28399cb5affected
  • 98086df8b70c06234a8f4290c46064e44dafa0ed to < e2ea55564229e4bea1474af15b111b3a3043b76faffected
  • 98086df8b70c06234a8f4290c46064e44dafa0ed to < adc96d30f6503d30dc68670c013716f1d9fcc747affected
  • 98086df8b70c06234a8f4290c46064e44dafa0ed to < 703c13fe3c9af557d312f5895ed6a5fda2711104affected
  • f591a42b8f9a9d20e01d0462f4f55d2176ac52ecaffected
  • e6584124b9823151ef586d10dedf565ade50cea6affected
  • 4.19.142 to < 4.19.270affected
  • 5.4.61 to < 5.4.229affected
  • 5.7.18 to < 5.8affected
  • 5.8.4 to < 5.9affected

Linux Linux

Default version status: affected

  • 5.9affected
  • 0 to < 5.9unaffected
  • 4.19.270 to ≤ 4.19.*unaffected
  • 5.4.229 to ≤ 5.4.*unaffected
  • 5.10.164 to ≤ 5.10.*unaffected
  • 5.15.89 to ≤ 5.15.*unaffected
  • 6.1.7 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References