Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-49731

ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()

Description

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and probably wrong?) case that the 'ppi' parameter of ata_host_alloc_pinfo() points to an array starting with a NULL pointer, there's going to be a kernel oops as the 'pi' local variable won't get reassigned from the initial value of NULL. Initialize 'pi' instead to '&ata_dummy_port_info' to fix the possible kernel oops for good... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f5cda257296fbd3683b1f568f2d94d3caaacf74d to < ca4693e6e06e4fd2b240c0fec47aa2498c94848eaffected
  • f5cda257296fbd3683b1f568f2d94d3caaacf74d to < 1ac5efee33f29e704226506d429b84575a5d66f8affected
  • f5cda257296fbd3683b1f568f2d94d3caaacf74d to < a810bd5af06977a847d1f202b22d7defd5c62497affected
  • f5cda257296fbd3683b1f568f2d94d3caaacf74d to < 253334f84c81bc6a43af489f108c0bddad989eefaffected
  • f5cda257296fbd3683b1f568f2d94d3caaacf74d to < 36cd19e7d4e5571d77a2ed20c5b6ef50cf57734aaffected
  • f5cda257296fbd3683b1f568f2d94d3caaacf74d to < ff128fbea720bf763fa345680dda5f050bc24a47affected
  • f5cda257296fbd3683b1f568f2d94d3caaacf74d to < 07cbdb4807d369fbda73062a91b570c4dc5ec429affected
  • f5cda257296fbd3683b1f568f2d94d3caaacf74d to < bf476fe22aa1851bab4728e0c49025a6a0bea307affected

Linux Linux

Default version status: affected

  • 2.6.22affected
  • 0 to < 2.6.22unaffected
  • 4.9.320 to ≤ 4.9.*unaffected
  • 4.14.285 to ≤ 4.14.*unaffected
  • 4.19.249 to ≤ 4.19.*unaffected
  • 5.4.200 to ≤ 5.4.*unaffected
  • 5.10.124 to ≤ 5.10.*unaffected
  • 5.15.49 to ≤ 5.15.*unaffected
  • 5.18.6 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References