CVE-2022-48663

2024-04-2813:15:07

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

linux kernel

null pointer dereference

gpio

debugfs

vulnerability

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

In the Linux kernel, the following vulnerability has been resolved:

gpio: mockup: fix NULL pointer dereference when removing debugfs

We now remove the device’s debugfs entries when unbinding the driver.
This now causes a NULL-pointer dereference on module exit because the
platform devices are unregistered after the global debugfs directory
has been recursively removed. Fix it by unregistering the devices first.

Affected configurations

Vulners

Node

linuxlinux_kernelRange5.10.144–5.10.146

linuxlinux_kernelRange5.15.69–5.15.71

linuxlinux_kernelRange5.19.10–5.19.12

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpio/gpio-mockup.c"
    ],
    "versions": [
      {
        "version": "3815e66c2183",
        "lessThan": "bdea98b98f84",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3a10e8edee2b",
        "lessThan": "18352095a0d5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bc55c1677edb",
        "lessThan": "af0bfabf06c7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "303e6da99429",
        "lessThan": "b7df41a6f79d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpio/gpio-mockup.c"
    ],
    "versions": [
      {
        "version": "5.10.144",
        "lessThan": "5.10.146",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.15.69",
        "lessThan": "5.15.71",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.19.10",
        "lessThan": "5.19.12",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]