CVE-2022-49731: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: fix NULL pointer deref in atahostallocpinfo()
In an unlikely (and probably wrong?) case that the 'ppi' parameter of atahostallocpinfo() points to an array starting with a NULL pointer, there's going to be a kernel oops as the 'pi' local variable won't get reassigned from the initial value of NULL. Initialize 'pi' instead to '&atadummyportinfo' to fix the possible kernel oops for good...
Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49731?
CVE-2022-49731 is classified as a low-severity vulnerability in the Linux kernel.
How do I fix CVE-2022-49731?
To fix CVE-2022-49731, update your Linux kernel to the latest patched version provided by your distribution.
What software is affected by CVE-2022-49731?
CVE-2022-49731 affects the Linux kernel, specifically its libata-core component.
What type of vulnerability is CVE-2022-49731?
CVE-2022-49731 is a NULL pointer dereference vulnerability that could potentially lead to denial of service.
When was CVE-2022-49731 published?
CVE-2022-49731 was published in December 2022.