-

CVE-2022-50276

In the Linux kernel, the following vulnerability has been resolved:

power: supply: fix null pointer dereferencing in power_supply_get_battery_info

when kmalloc() fail to allocate memory in kasprintf(), propname
will be NULL, strcmp() called by of_get_property() will cause
null pointer dereference.

So return ENOMEM if kasprintf() return NULL pointer.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < 8ea68b4e3fa9392ef9dae303abc8735a033c280f
Version 3afb50d7125bcdbf71df843134e96ceffc78c8b8
Status affected
Version < 5beadb55f4e36fafe5d6df5dcd5f85d803f3f134
Version 3afb50d7125bcdbf71df843134e96ceffc78c8b8
Status affected
Version < d21534ab4fd7883e1c8037a76671d4e8b6ea14cb
Version 3afb50d7125bcdbf71df843134e96ceffc78c8b8
Status affected
Version < 279af90e65cbdb3e5c4519b0043324d7876bc5ec
Version 3afb50d7125bcdbf71df843134e96ceffc78c8b8
Status affected
Version < b8131efb89d9f837c9244f900f0fc2699fd1181d
Version 3afb50d7125bcdbf71df843134e96ceffc78c8b8
Status affected
Version < 104bb8a663451404a26331263ce5b96c34504049
Version 3afb50d7125bcdbf71df843134e96ceffc78c8b8
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.0
Status affected
Version < 5.0
Version 0
Status unaffected
Version <= 5.4.*
Version 5.4.229
Status unaffected
Version <= 5.10.*
Version 5.10.163
Status unaffected
Version <= 5.15.*
Version 5.15.86
Status unaffected
Version <= 6.0.*
Version 6.0.16
Status unaffected
Version <= 6.1.*
Version 6.1.2
Status unaffected
Version <= *
Version 6.2
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.125
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String