CVE-2022-49832

pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map

published May 1, 2025

CVSS
—
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map

Here is the BUG report by KASAN about null pointer dereference:

BUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50

Read of size 1 at addr 0000000000000000 by task python3/2640

Call Trace:

strcmp

__of_find_property

of_find_property

pinctrl_dt_to_map

kasprintf() would return NULL pointer when kmalloc() fail to allocate.

So directly return ENOMEM, if kasprintf() return NULL pointer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Published
2025-05-01T14:09Z
EPSS history
Timeline
  • 01 MAY 14:09Z
    pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
    cvelistv5