PT-2025-8551 · Linux+2 · Linux Kernel+2

Haowen Bai

·

Publicado

2025-02-26

·

Atualizado

2025-04-14

·

CVE-2022-49618

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential NULL dereference issue in the aspeed pinmux set mux() function has been identified. The pdesc could be null, but the code still attempts to dereference pdesc->name, leading to a null pointer access. To address this, a null check has been added before the dereference.
Recommendations For the affected Linux kernel versions, consider applying the patch that adds a null check before dereferencing pdesc in the aspeed pinmux set mux() function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-49618
SUSE-SU-2025:1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1027-1
SUSE-SU-2025_1241-1

Produtos afetados

Astra Linux
Linux Kernel
Suse