Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: sparx5: switchdev: fix possible NULL pointer dereference As the possible failure of the allocation, devm_kzalloc() may return NULL pointer. Therefore, it should be better to check the 'db' in order to prevent the dereference of NULL pointer.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.15, < 5.15.33 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/0906f3a3df07835e37077d8971aac65347f2ed57Patch
- https://git.kernel.org/stable/c/b375ea083fa649092cd016ac1f89a2d1fd8f8e8bPatch
- https://git.kernel.org/stable/c/c346791877e6ce923bb21e34b30c6f99326aa5a8Patch
- https://git.kernel.org/stable/c/e7e1fff76c4c57688dc7d53a3b6212182d5628d0Patch
FAQ
What is CVE-2022-49184?
CVE-2022-49184 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: net: sparx5: switchdev: fix possible NULL pointer dereference As the possible failure of the allocation, devm_kzalloc() may return...
How severe is CVE-2022-49184?
CVE-2022-49184 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-49184?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.