CVE-2022-49009: hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (asus-ec-sensors) Add checks for devmkcalloc
As the devmkcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49009?
CVE-2022-49009 is categorized as a vulnerability that could lead to a NULL pointer dereference, potentially causing a denial of service.
How do I fix CVE-2022-49009?
To fix CVE-2022-49009, update the Linux kernel to a version that incorporates the patch addressing the NULL pointer dereference issue.
Which versions of the Linux kernel are affected by CVE-2022-49009?
CVE-2022-49009 affects Linux kernel versions from 5.18 up to but not including 6.0.12, as well as specific 6.1 release candidates.
What causes the vulnerability in CVE-2022-49009?
CVE-2022-49009 is caused by a lack of checks for the return value of devm_kcalloc, which can return NULL leading to potential dereferencing issues.
Is CVE-2022-49009 being actively exploited?
As of now, there is no public information indicating that CVE-2022-49009 is being actively exploited in the wild.