{"id":"CVE-2022-49832","state":"PUBLISHED","title":"pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map","description":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map\n\nHere is the BUG report by KASAN about null pointer dereference:\n\nBUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50\nRead of size 1 at addr 0000000000000000 by task python3/2640\nCall Trace:\n strcmp\n __of_find_property\n of_find_property\n pinctrl_dt_to_map\n\nkasprintf() would return NULL pointer when kmalloc() fail to allocate.\nSo directly return ENOMEM, if kasprintf() return NULL pointer.","publishedAt":"2025-05-01T14:09:50.435Z","updatedAt":"2026-05-11T19:07:38.166Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"aaf552c5d53abe4659176e099575fe870d2e4768","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"b4d9f55cd38435358bc16d580612bc0d798d7b4c","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"a988dcd3dd9e691c5ccc3324b209688f3b5453e9","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"040f726fecd88121f3b95e70369785ad452dddf9","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"777430aa4ddccaa5accec6db90ffc1d47f00d471","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"97e5b508e96176f1a73888ed89df396d7041bfcb","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"5834a3a98cd266ad35a229923c0adbd0addc8d68","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"91d5c5060ee24fe8da88cd585bb43b843d2f0dce","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/pinctrl/devicetree.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.5","versionType":"semver"},{"version":"4.9.334","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.300","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.267","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.225","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.156","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.80","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.10","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/pinctrl/devicetree.c"]}],"references":["https://git.kernel.org/stable/c/aaf552c5d53abe4659176e099575fe870d2e4768","https://git.kernel.org/stable/c/b4d9f55cd38435358bc16d580612bc0d798d7b4c","https://git.kernel.org/stable/c/a988dcd3dd9e691c5ccc3324b209688f3b5453e9","https://git.kernel.org/stable/c/040f726fecd88121f3b95e70369785ad452dddf9","https://git.kernel.org/stable/c/777430aa4ddccaa5accec6db90ffc1d47f00d471","https://git.kernel.org/stable/c/97e5b508e96176f1a73888ed89df396d7041bfcb","https://git.kernel.org/stable/c/5834a3a98cd266ad35a229923c0adbd0addc8d68","https://git.kernel.org/stable/c/91d5c5060ee24fe8da88cd585bb43b843d2f0dce"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/49xxx/CVE-2022-49832.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-49832","state":"PUBLISHED","datePublished":"2025-05-01T14:09:50.435Z","dateUpdated":"2026-05-11T19:07:38.166Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-05-01T14:05:17.228Z"},"containers":{"cna":{"title":"pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map\n\nHere is the BUG report by KASAN about null pointer dereference:\n\nBUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50\nRead of size 1 at addr 0000000000000000 by task python3/2640\nCall Trace:\n strcmp\n __of_find_property\n of_find_property\n pinctrl_dt_to_map\n\nkasprintf() would return NULL pointer when kmalloc() fail to allocate.\nSo directly return ENOMEM, if kasprintf() return NULL pointer."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"aaf552c5d53abe4659176e099575fe870d2e4768","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"b4d9f55cd38435358bc16d580612bc0d798d7b4c","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"a988dcd3dd9e691c5ccc3324b209688f3b5453e9","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"040f726fecd88121f3b95e70369785ad452dddf9","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"777430aa4ddccaa5accec6db90ffc1d47f00d471","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"97e5b508e96176f1a73888ed89df396d7041bfcb","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"5834a3a98cd266ad35a229923c0adbd0addc8d68","versionType":"git"},{"version":"57291ce295c0aca738dd284c4a9c591c09ebee71","status":"affected","lessThan":"91d5c5060ee24fe8da88cd585bb43b843d2f0dce","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/pinctrl/devicetree.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.5","versionType":"semver"},{"version":"4.9.334","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.300","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.267","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.225","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.156","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.80","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.10","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/pinctrl/devicetree.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/aaf552c5d53abe4659176e099575fe870d2e4768"},{"url":"https://git.kernel.org/stable/c/b4d9f55cd38435358bc16d580612bc0d798d7b4c"},{"url":"https://git.kernel.org/stable/c/a988dcd3dd9e691c5ccc3324b209688f3b5453e9"},{"url":"https://git.kernel.org/stable/c/040f726fecd88121f3b95e70369785ad452dddf9"},{"url":"https://git.kernel.org/stable/c/777430aa4ddccaa5accec6db90ffc1d47f00d471"},{"url":"https://git.kernel.org/stable/c/97e5b508e96176f1a73888ed89df396d7041bfcb"},{"url":"https://git.kernel.org/stable/c/5834a3a98cd266ad35a229923c0adbd0addc8d68"},{"url":"https://git.kernel.org/stable/c/91d5c5060ee24fe8da88cd585bb43b843d2f0dce"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:07:38.166Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"4.9.334"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"4.14.300"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"4.19.267"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"5.4.225"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"5.10.156"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"5.15.80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"6.0.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"6.1"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}