In the Linux kernel, the following vulnerability has been resolved:
pinctrl: devicetree: fix null pointer dereferencing in pinctrldtto_map
Here is the BUG report by KASAN about null pointer dereference:
BUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50 Read of size 1 at addr 0000000000000000 by task python3/2640 Call Trace: strcmp _offindproperty offindproperty pinctrldttomap
kasprintf() would return NULL pointer when kmalloc() fail to allocate. So directly return ENOMEM, if kasprintf() return NULL pointer.
[
{
"id": "CVE-2022-49832-09a0ca1d",
"target": {
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"112401787495468887907714223528229098155",
"127463835436476014205132945006835439943",
"296086314903097653956999827759402567104",
"73865008982746733660442524750018694499"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@777430aa4ddccaa5accec6db90ffc1d47f00d471"
},
{
"id": "CVE-2022-49832-23c6e42a",
"target": {
"function": "pinctrl_dt_to_map",
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"length": 1180.0,
"function_hash": "290388076403173077307709345733244066266"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4d9f55cd38435358bc16d580612bc0d798d7b4c"
},
{
"id": "CVE-2022-49832-35b623ad",
"target": {
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"112401787495468887907714223528229098155",
"127463835436476014205132945006835439943",
"296086314903097653956999827759402567104",
"73865008982746733660442524750018694499"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aaf552c5d53abe4659176e099575fe870d2e4768"
},
{
"id": "CVE-2022-49832-372b7cbf",
"target": {
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"112401787495468887907714223528229098155",
"127463835436476014205132945006835439943",
"296086314903097653956999827759402567104",
"73865008982746733660442524750018694499"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4d9f55cd38435358bc16d580612bc0d798d7b4c"
},
{
"id": "CVE-2022-49832-3bab74f6",
"target": {
"function": "pinctrl_dt_to_map",
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"length": 1198.0,
"function_hash": "298642732847366127249358313315928664156"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97e5b508e96176f1a73888ed89df396d7041bfcb"
},
{
"id": "CVE-2022-49832-4729fd7d",
"target": {
"function": "pinctrl_dt_to_map",
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"length": 1156.0,
"function_hash": "267398989796324346700866107235116053239"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aaf552c5d53abe4659176e099575fe870d2e4768"
},
{
"id": "CVE-2022-49832-4a49c5c3",
"target": {
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"112401787495468887907714223528229098155",
"127463835436476014205132945006835439943",
"296086314903097653956999827759402567104",
"73865008982746733660442524750018694499"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97e5b508e96176f1a73888ed89df396d7041bfcb"
},
{
"id": "CVE-2022-49832-62c8668d",
"target": {
"function": "pinctrl_dt_to_map",
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"length": 1198.0,
"function_hash": "298642732847366127249358313315928664156"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91d5c5060ee24fe8da88cd585bb43b843d2f0dce"
},
{
"id": "CVE-2022-49832-981cf864",
"target": {
"function": "pinctrl_dt_to_map",
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"length": 1198.0,
"function_hash": "298642732847366127249358313315928664156"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@040f726fecd88121f3b95e70369785ad452dddf9"
},
{
"id": "CVE-2022-49832-99218331",
"target": {
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"112401787495468887907714223528229098155",
"127463835436476014205132945006835439943",
"296086314903097653956999827759402567104",
"73865008982746733660442524750018694499"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a988dcd3dd9e691c5ccc3324b209688f3b5453e9"
},
{
"id": "CVE-2022-49832-ab132159",
"target": {
"function": "pinctrl_dt_to_map",
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"length": 1198.0,
"function_hash": "298642732847366127249358313315928664156"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@777430aa4ddccaa5accec6db90ffc1d47f00d471"
},
{
"id": "CVE-2022-49832-b923b7de",
"target": {
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"112401787495468887907714223528229098155",
"127463835436476014205132945006835439943",
"296086314903097653956999827759402567104",
"73865008982746733660442524750018694499"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5834a3a98cd266ad35a229923c0adbd0addc8d68"
},
{
"id": "CVE-2022-49832-bd02d5d1",
"target": {
"function": "pinctrl_dt_to_map",
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"length": 1198.0,
"function_hash": "298642732847366127249358313315928664156"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5834a3a98cd266ad35a229923c0adbd0addc8d68"
},
{
"id": "CVE-2022-49832-befa38ee",
"target": {
"function": "pinctrl_dt_to_map",
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"length": 1180.0,
"function_hash": "290388076403173077307709345733244066266"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a988dcd3dd9e691c5ccc3324b209688f3b5453e9"
},
{
"id": "CVE-2022-49832-c4ddef51",
"target": {
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"112401787495468887907714223528229098155",
"127463835436476014205132945006835439943",
"296086314903097653956999827759402567104",
"73865008982746733660442524750018694499"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@040f726fecd88121f3b95e70369785ad452dddf9"
},
{
"id": "CVE-2022-49832-fc5cbe4e",
"target": {
"file": "drivers/pinctrl/devicetree.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"112401787495468887907714223528229098155",
"127463835436476014205132945006835439943",
"296086314903097653956999827759402567104",
"73865008982746733660442524750018694499"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91d5c5060ee24fe8da88cd585bb43b843d2f0dce"
}
]