Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50276

power: supply: fix null pointer dereferencing in power_supply_get_battery_info

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in power_supply_get_battery_info when kmalloc() fail to allocate memory in kasprintf(), propname will be NULL, strcmp() called by of_get_property() will cause null pointer dereference. So return ENOMEM if kasprintf() return NULL pointer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to < 8ea68b4e3fa9392ef9dae303abc8735a033c280faffected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to < 5beadb55f4e36fafe5d6df5dcd5f85d803f3f134affected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to < d21534ab4fd7883e1c8037a76671d4e8b6ea14cbaffected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to < 279af90e65cbdb3e5c4519b0043324d7876bc5ecaffected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to < b8131efb89d9f837c9244f900f0fc2699fd1181daffected
  • 3afb50d7125bcdbf71df843134e96ceffc78c8b8 to < 104bb8a663451404a26331263ce5b96c34504049affected

Linux Linux

Default version status: affected

  • 5.0affected
  • 0 to < 5.0unaffected
  • 5.4.229 to ≤ 5.4.*unaffected
  • 5.10.163 to ≤ 5.10.*unaffected
  • 5.15.86 to ≤ 5.15.*unaffected
  • 6.0.16 to ≤ 6.0.*unaffected
  • 6.1.2 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References