NetSight
IP …
medium5.5

CVE-2022-50364

In the Linux kernel, the following vulnerability has been resolved: i2c: mux: reg: check return value after calling platform_get_resource() It will cause null-…

Impact

In the Linux kernel, the following vulnerability has been resolved: i2c: mux: reg: check return value after calling platform_get_resource() It will cause null-ptr-deref in resource_size(), if platform_get_resource() returns NULL, move calling resource_size() after devm_ioremap_resource() that will check 'res' to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.3 before 5.10.163
from 5.11 before 5.15.86
from 5.16 before 6.0.16
from 6.1 before 6.1.2

Weakness classification

CWE-476

References