VYPR
Medium severity5.5NVD Advisory· Published Feb 26, 2025· Updated Jun 17, 2026

CVE-2022-49608

CVE-2022-49608

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: ralink: Check for null return of devm_kcalloc

Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Linux/Kernelcpe-rescue10 versions
    4.18+ 9 more
    • (no CPE)range: 4.18
    • (no CPE)
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.18,<4.19.254
    • cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:5.19:rc7:*:*:*:*:*:*
  • osv-coords
    Range: >= 4.18.0, < 4.19.254

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.