CVE-2022-49618: pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: aspeed: Fix potential NULL dereference in aspeedpinmuxsetmux()
pdesc could be null but still dereference pdesc->name and it will lead to a null pointer access. So we move a null check before dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49618?
CVE-2022-49618 has been classified as a medium severity vulnerability.
How do I fix CVE-2022-49618?
To fix CVE-2022-49618, update the Linux kernel to a version that is not vulnerable, specifically beyond version 5.10.132.
Which Linux kernel versions are affected by CVE-2022-49618?
CVE-2022-49618 affects Linux kernel versions including 5.10.x up to 5.10.132 and certain versions within the 5.11.x to 5.19-rc5 ranges.
What causes the vulnerability CVE-2022-49618?
CVE-2022-49618 is caused by a potential NULL dereference in the aspeed_pinmux_set_mux function in the Linux kernel.
Is CVE-2022-49618 exploitable remotely?
CVE-2022-49618 is not considered to be remotely exploitable, as it requires local access to the affected system.