-

CVE-2022-50415

In the Linux kernel, the following vulnerability has been resolved:

parisc: led: Fix potential null-ptr-deref in start_task()

start_task() calls create_singlethread_workqueue() and not checked the
ret value, which may return NULL. And a null-ptr-deref may happen:

start_task()
    create_singlethread_workqueue() # failed, led_wq is NULL
    queue_delayed_work()
        queue_delayed_work_on()
            __queue_delayed_work()  # warning here, but continue
                __queue_work()      # access wq->flags, null-ptr-deref

Check the ret value and return -ENOMEM if it is NULL.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < c6db0c32f39684c89c97bc1ba1c9c4249ca09e48
Version 3499495205a676d85fcc2f3c28e35ec9b43c47e3
Status affected
Version < fc6d0f65f22040c6cc8a5ce032bf90252629de50
Version 3499495205a676d85fcc2f3c28e35ec9b43c47e3
Status affected
Version < fc307b2905a3dd75c50a53b4d87ac9c912fb7c4e
Version 3499495205a676d85fcc2f3c28e35ec9b43c47e3
Status affected
Version < 5e4500454d75dd249be4695d83afa3ba0724c37e
Version 3499495205a676d85fcc2f3c28e35ec9b43c47e3
Status affected
Version < 3505c187b86136250b39e62c72a3a70435277af6
Version 3499495205a676d85fcc2f3c28e35ec9b43c47e3
Status affected
Version < ac838c663ba1fd6bff35a817fd89a47ab55e88e0
Version 3499495205a676d85fcc2f3c28e35ec9b43c47e3
Status affected
Version < 77f8b628affaec692d83ad8bfa3520db8a0cc493
Version 3499495205a676d85fcc2f3c28e35ec9b43c47e3
Status affected
Version < 67c98fec87ed76b1feb2ae810051afd88dfa9df6
Version 3499495205a676d85fcc2f3c28e35ec9b43c47e3
Status affected
Version < 41f563ab3c33698bdfc3403c7c2e6c94e73681e4
Version 3499495205a676d85fcc2f3c28e35ec9b43c47e3
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 2.6.15
Status affected
Version < 2.6.15
Version 0
Status unaffected
Version <= 4.9.*
Version 4.9.337
Status unaffected
Version <= 4.14.*
Version 4.14.303
Status unaffected
Version <= 4.19.*
Version 4.19.270
Status unaffected
Version <= 5.4.*
Version 5.4.229
Status unaffected
Version <= 5.10.*
Version 5.10.163
Status unaffected
Version <= 5.15.*
Version 5.15.87
Status unaffected
Version <= 6.0.*
Version 6.0.18
Status unaffected
Version <= 6.1.*
Version 6.1.4
Status unaffected
Version <= *
Version 6.2
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.127
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String