CVE-2022-49273
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49273
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49273.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49273
- Related
- Published
- 2025-02-26T07:01:04Z
- Modified
- 2025-04-14T16:53:14Z
- Downstream
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
rtc: pl031: fix rtc features null pointer dereference
When there is no interrupt line, rtc alarm feature is disabled.
The clearing of the alarm feature bit was being done prior to allocations of ldata->rtc device, resulting in a null pointer dereference.
Clear RTCFEATUREALARM after the rtc device is allocated.
- References
-
- https://git.kernel.org/stable/c/1b915703964f7e636961df04c540261dc55c6c70
- https://git.kernel.org/stable/c/cd2722e411e8ab7e5ae41102f6925fa13dffdac5
- https://git.kernel.org/stable/c/d274ce4a3dfd0b9a292667535578359b865765cb
- https://git.kernel.org/stable/c/ea6af39f3da50c86367a71eb3cc674ade3ed244c
- https://security-tracker.debian.org/tracker/CVE-2022-49273
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source