CVE - CVE-2022-49608

CVE-ID
CVE-2022-49608	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devm_kcalloc Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/13596e6c9e541e90e5fc2c52b23f08b951370da9 URL:https://git.kernel.org/stable/c/13596e6c9e541e90e5fc2c52b23f08b951370da9 MISC:https://git.kernel.org/stable/c/44016a85419ca0d4f1e4d0127b330f8e4e2a57d0 URL:https://git.kernel.org/stable/c/44016a85419ca0d4f1e4d0127b330f8e4e2a57d0 MISC:https://git.kernel.org/stable/c/5595d30c4dc27d939635c3188c68203b6ece1711 URL:https://git.kernel.org/stable/c/5595d30c4dc27d939635c3188c68203b6ece1711 MISC:https://git.kernel.org/stable/c/5694b162f275fb9a9f89422701b2b963be11e496 URL:https://git.kernel.org/stable/c/5694b162f275fb9a9f89422701b2b963be11e496 MISC:https://git.kernel.org/stable/c/6194c021496addc11763d1ffa89ce5751889fe3c URL:https://git.kernel.org/stable/c/6194c021496addc11763d1ffa89ce5751889fe3c MISC:https://git.kernel.org/stable/c/c3b821e8e406d5650e587b7ac624ac24e9b780a8 URL:https://git.kernel.org/stable/c/c3b821e8e406d5650e587b7ac624ac24e9b780a8
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)