In the Linux kernel, the following vulnerability has been resolved:
cxl/region: Fix decoder allocation crash
When an intermediate port's decoders have been exhausted by existing
regions, and creating a new region with the port in question in it's
hierarchical path is attempted, cxl_port_attach_region() fails to find a
port decoder (as would be expected), and drops into the failure / cleanup
path.
However, during cleanup of the region reference, a sanity check attempts
to dereference the decoder, which in the above case didn't exist. This
causes a NULL pointer dereference BUG.
To fix this, refactor the decoder allocation and de-allocation into
helper routines, and in this 'free' routine, check that the decoder,
@cxld, is valid before attempting any operations on it.
References
Configurations
Configuration 1 (hide)
|
History
07 May 2025, 13:19
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| First Time |
Linux linux Kernel
Linux |
|
| CPE | cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:* |
|
| References | () https://git.kernel.org/stable/c/71ee71d7adcba648077997a29a91158d20c40b09 - Patch | |
| References | () https://git.kernel.org/stable/c/c6813b5610ac53af73edd87a660d23a0511faa47 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
01 May 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-01 15:16
Updated : 2025-05-07 13:19
NVD link : CVE-2022-49895
Mitre link : CVE-2022-49895
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference