ZeroHour

CVE-2022-49308

CVSS 3.1
5.5 medium
EPSS
<1%p21
Published
()
Modified
Description

In the Linux kernel, the following vulnerability has been resolved: extcon: Modify extcon device to be created after driver data is set Currently, someone can invoke the sysfs such as state_show() intermittently before dev_set_drvdata() is done. And it can be a cause of kernel Oops because of edev is Null at that time. So modified the driver registration to after setting drviver data. - Oops's backtrace. Backtrace: [ ] (state_show) from [ ] (dev_attr_show) [ ] (dev_attr_show) from [ ] (sysfs_kf_seq_show) [ ] (sysfs_kf_seq_show) from [ ] (kernfs_seq_show) [ ] (kernfs_seq_show) from [ ] (seq_read) [ ] (seq_read) from [ ] (kernfs_fop_read) [ ] (kernfs_fop_read) from [ ] (__vfs_read) [ ] (__vfs_read) from [ ] (vfs_read) [ ] (vfs_read) from [ ] (ksys_read) [ ] (ksys_read) from [ ] (sys_read) [ ] (sys_read) from [ ] (__sys_trace_return)

Vendors
linux
Products
linux kernel
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.