NetSight
medium5.5

CVE-2022-48663

In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: fix NULL pointer dereference when removing debugfs We now remove the device's…

Impact

In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: fix NULL pointer dereference when removing debugfs We now remove the device's debugfs entries when unbinding the driver. This now causes a NULL-pointer dereference on module exit because the platform devices are unregistered *after* the global debugfs directory has been recursively removed. Fix it by unregistering the devices first.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.10.144 before 5.10.146
from 5.15.69 before 5.15.71
from 5.19.10 before 5.19.12

Weakness classification

References