CVE-2022-49202

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49202

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: add missing NULL check in h5_enqueue Syzbot hit general protection fault in __pm_runtime_resume(). The problem was in missing NULL check. hu->serdev can be NULL and we should not blindly pass &serdev->dev somewhere, since it will cause GPF.

References
Link Resource
https://git.kernel.org/stable/c/32cb08e958696908a9aad5e49a78d74f7e32fffb Patch
https://git.kernel.org/stable/c/7235485433d290367d60ae22fcdfc565e61d42ab Patch
https://git.kernel.org/stable/c/8a3896c30f542439d36303183dc96f65df8cc528 Patch
https://git.kernel.org/stable/c/e6b6c904c0f88588b6a3ace20e4c0d61eab124f8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

22 Sep 2025, 20:58

Type Values Removed Values Added
CWE CWE-476
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/32cb08e958696908a9aad5e49a78d74f7e32fffb - () https://git.kernel.org/stable/c/32cb08e958696908a9aad5e49a78d74f7e32fffb - Patch
References () https://git.kernel.org/stable/c/7235485433d290367d60ae22fcdfc565e61d42ab - () https://git.kernel.org/stable/c/7235485433d290367d60ae22fcdfc565e61d42ab - Patch
References () https://git.kernel.org/stable/c/8a3896c30f542439d36303183dc96f65df8cc528 - () https://git.kernel.org/stable/c/8a3896c30f542439d36303183dc96f65df8cc528 - Patch
References () https://git.kernel.org/stable/c/e6b6c904c0f88588b6a3ace20e4c0d61eab124f8 - () https://git.kernel.org/stable/c/e6b6c904c0f88588b6a3ace20e4c0d61eab124f8 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: hci_uart: falta de comprobación NULL en h5_enqueue Syzbot encontró un fallo de protección general en __pm_runtime_resume(). El problema estaba en la falta de comprobación NULL. hu->serdev puede ser NULL y no deberíamos pasar ciegamente &serdev->dev en algún lugar, ya que provocará GPF.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-09-22 20:58

NVD link : CVE-2022-49202

Mitre link : CVE-2022-49202

CVE.ORG link : CVE-2022-49202

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference