CVE-2022-49083

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49083

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: iommu/omap: Fix regression in probe for NULL pointer dereference Commit 3f6634d997db ("iommu: Use right way to retrieve iommu_ops") started triggering a NULL pointer dereference for some omap variants: __iommu_probe_device from probe_iommu_group+0x2c/0x38 probe_iommu_group from bus_for_each_dev+0x74/0xbc bus_for_each_dev from bus_iommu_probe+0x34/0x2e8 bus_iommu_probe from bus_set_iommu+0x80/0xc8 bus_set_iommu from omap_iommu_init+0x88/0xcc omap_iommu_init from do_one_initcall+0x44/0x24 This is caused by omap iommu probe returning 0 instead of ERR_PTR(-ENODEV) as noted by Jason Gunthorpe <[email protected]>. Looks like the regression already happened with an earlier commit 6785eb9105e3 ("iommu/omap: Convert to probe/release_device() call-backs") that changed the function return type and missed converting one place.

References
Link Resource
https://git.kernel.org/stable/c/1d89f2b9eadbcf3ce93c6d7238f68299a1f84968 Patch
https://git.kernel.org/stable/c/47e239117bd97c8556f9187af7a9a7938db4e021 Patch
https://git.kernel.org/stable/c/71ff461c3f41f6465434b9e980c01782763e7ad8 Patch
https://git.kernel.org/stable/c/bd905fed87ce01ac010011bb8f44ed0140116ceb Patch
https://git.kernel.org/stable/c/ea518578aa8a9a0280605b53cc33f707e10c8178 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
History

23 Sep 2025, 18:32

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/1d89f2b9eadbcf3ce93c6d7238f68299a1f84968 - () https://git.kernel.org/stable/c/1d89f2b9eadbcf3ce93c6d7238f68299a1f84968 - Patch
References () https://git.kernel.org/stable/c/47e239117bd97c8556f9187af7a9a7938db4e021 - () https://git.kernel.org/stable/c/47e239117bd97c8556f9187af7a9a7938db4e021 - Patch
References () https://git.kernel.org/stable/c/71ff461c3f41f6465434b9e980c01782763e7ad8 - () https://git.kernel.org/stable/c/71ff461c3f41f6465434b9e980c01782763e7ad8 - Patch
References () https://git.kernel.org/stable/c/bd905fed87ce01ac010011bb8f44ed0140116ceb - () https://git.kernel.org/stable/c/bd905fed87ce01ac010011bb8f44ed0140116ceb - Patch
References () https://git.kernel.org/stable/c/ea518578aa8a9a0280605b53cc33f707e10c8178 - () https://git.kernel.org/stable/c/ea518578aa8a9a0280605b53cc33f707e10c8178 - Patch
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iommu/omap: Se corrige la regresión en la sonda para la desreferencia de puntero NULL. el commit 3f6634d997db ("iommu: Use la forma correcta de recuperar iommu_ops") comenzó a activar una desreferencia de puntero NULL para algunas variantes de omap: __iommu_probe_device de probe_iommu_group+0x2c/0x38 probe_iommu_group de bus_for_each_dev+0x74/0xbc bus_for_each_dev de bus_iommu_probe+0x34/0x2e8 bus_iommu_probe de bus_set_iommu+0x80/0xc8 bus_set_iommu de omap_iommu_init+0x88/0xcc omap_iommu_init de do_one_initcall+0x44/0x24 Esto se debe a que la sonda omap iommu devuelve 0 en lugar de ERR_PTR(-ENODEV), como lo señaló Jason Gunthorpe . Parece que la regresión ya ocurrió con una confirmación anterior 6785eb9105e3 ("iommu/omap: Convertir a devoluciones de llamada de probe/release_device()") que cambió el tipo de retorno de la función y no realizó la conversión en un lugar.

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-09-23 18:32

NVD link : CVE-2022-49083

Mitre link : CVE-2022-49083

CVE.ORG link : CVE-2022-49083

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference