CVE-2022-49731
Description
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and probably wrong?) case that the 'ppi' parameter of ata_host_alloc_pinfo() points to an array starting with a NULL pointer, there's going to be a kernel oops as the 'pi' local variable won't get reassigned from the initial value of NULL. Initialize 'pi' instead to '&ata_dummy_port_info' to fix the possible kernel oops for good... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
How to fix
- linux linux_kernel4.9.320, 4.14.285, 4.19.249, 5.4.200, 5.10.124, 5.15.49, 5.18.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | v < 4.9.320, 4.10 ≤ v < 4.14.285, 4.15 ≤ v < 4.19.249, 4.20 ≤ v < 5.4.200, 5.5 ≤ v < 5.10.124, 5.11 ≤ v < 5.15.49, 5.16 ≤ v < 5.18.6, 5.19 | 4.9.320, 4.14.285, 4.19.249, 5.4.200, 5.10.124, 5.15.49, 5.18.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.