5.5

CVE-2022-49060

net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()

In the Linux kernel, the following vulnerability has been resolved:

net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()

dev_name() was called with dev.parent as argument but without to
NULL-check it before.
Solve this by checking the pointer before the call to dev_name().
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.1 < 5.4.190
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.112
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.35
Linux ≫ Linux Kernel Version >= 5.16 < 5.17.4
Linux ≫ Linux Kernel Version 5.18 Update rc1
Linux ≫ Linux Kernel Version 5.18 Update rc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.18
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA-ADP 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/22025513ced3d599ee8b24169141c95cf2467a4a
Patch
https://git.kernel.org/stable/c/35b91e49bc80ca944a8679c3b139ddaf2f8eea0f
Patch
https://git.kernel.org/stable/c/3a523807f01455fe9a0c1a433f27cd4411ee400f
Patch
https://git.kernel.org/stable/c/a05f5e26cb8bb4d07e0595545fcad1bb406f0085
Patch
https://git.kernel.org/stable/c/d22f4f977236f97e01255a80bca2ea93a8094fc8
Patch