Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-49608

pinctrl: ralink: Check for null return of devm_kcalloc

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devm_kcalloc Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a86854d0c599b3202307abceb68feee4d7061578 to < 13596e6c9e541e90e5fc2c52b23f08b951370da9affected
  • a86854d0c599b3202307abceb68feee4d7061578 to < 6194c021496addc11763d1ffa89ce5751889fe3caffected
  • a86854d0c599b3202307abceb68feee4d7061578 to < 5694b162f275fb9a9f89422701b2b963be11e496affected
  • a86854d0c599b3202307abceb68feee4d7061578 to < 44016a85419ca0d4f1e4d0127b330f8e4e2a57d0affected
  • a86854d0c599b3202307abceb68feee4d7061578 to < 5595d30c4dc27d939635c3188c68203b6ece1711affected
  • a86854d0c599b3202307abceb68feee4d7061578 to < c3b821e8e406d5650e587b7ac624ac24e9b780a8affected

Linux Linux

Default version status: affected

  • 4.18affected
  • 0 to < 4.18unaffected
  • 4.19.254 to ≤ 4.19.*unaffected
  • 5.4.208 to ≤ 5.4.*unaffected
  • 5.10.134 to ≤ 5.10.*unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References