CVE-2022-49453: soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc
In the Linux kernel, the following vulnerability has been resolved:
soc: ti: tiscipmdomains: Check for null return of devmkcalloc
The allocation funciton devmkcalloc may fail and return a null pointer, which would cause a null-pointer dereference later. It might be better to check it and directly return -ENOMEM just like the usage of devmkcalloc in previous code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49453?
CVE-2022-49453 has been classified with high severity due to the potential for null pointer dereference in the Linux kernel.
How do I fix CVE-2022-49453?
To fix CVE-2022-49453, update the Linux kernel to version 5.10.121 or later, or to any version beyond 5.15.46 and 5.17.14.
Which versions of the Linux kernel are affected by CVE-2022-49453?
CVE-2022-49453 affects Linux kernel versions between 5.11 and 5.15.46, 5.16 and 5.17.14, as well as 5.18 and below 5.18.3.
What is the potential impact of CVE-2022-49453?
The potential impact of CVE-2022-49453 includes system instability due to null pointer dereference, possibly leading to a crash.
Is there a workaround for CVE-2022-49453 if I cannot update the kernel?
There are no recommended workarounds for CVE-2022-49453; updating the kernel is the best solution.