VYPR
Medium severity5.5NVD Advisory· Published Oct 21, 2024· Updated Jun 17, 2026

CVE-2022-48952

CVE-2022-48952

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: mt7621: Add sentinel to quirks table

Current driver is missing a sentinel in the struct soc_device_attribute array, which causes an oops when assessed by the soc_device_match(mt7621_pcie_quirks_match) call.

This was only exposed once the CONFIG_SOC_MT7621 mt7621 soc_dev_attr was fixed to register the SOC as a device, in:

commit 7c18b64bba3b ("mips: ralink: mt7621: do not use kzalloc too early")

Fix it by adding the required sentinel.

Affected products

6
  • Linux/Kernel5 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.4.17,<5.15.86
    • cpe:2.3:o:linux:linux_kernel:6.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.1:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 5.5
  • osv-coords
    Range: >= 5.5.0, < 5.15.86

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.