CVE-2022-50634
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe() cw_bat_probe() calls create_singlethread_workqueue() and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: cw_bat_probe() create_singlethread_workqueue() # failed, cw_bat->wq is NULL queue_delayed_work() queue_delayed_work_on() __queue_delayed_work() # warning here, but continue __queue_work() # access wq->flags, null-ptr-deref Check the ret value and return -ENOMEM if it is NULL.
How to fix
- Linux Linuxf7e2ba8ed08138102f21f3fe6414498c93177fd8, 5150b76aa2eb8bb8feb7f7a048417f9d39c3dd04, 97f2b4ddb0aa700d673691a7d5e44d226d22bab7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | b4c7715c10c106a041b0b3fabd26151c214ea394 ≤ v < f7e2ba8ed08138102f21f3fe6414498c93177fd8, b4c7715c10c106a041b0b3fabd26151c214ea394 ≤ v < 5150b76aa2eb8bb8feb7f7a048417f9d39c3dd04, b4c7715c10c106a041b0b3fabd26151c214ea394 ≤ v < 97f2b4ddb0aa700d673691a7d5e44d226d22bab7, 5.8 | f7e2ba8ed08138102f21f3fe6414498c93177fd8, 5150b76aa2eb8bb8feb7f7a048417f9d39c3dd04, 97f2b4ddb0aa700d673691a7d5e44d226d22bab7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.