CVE-2022-49308

extcon: Modify extcon device to be created after driver data is set

MEDIUM

5.5

CVSS Score

Published: February 26, 2025 at 02:10 AM UTC

Updated: June 17, 2026 at 05:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: extcon: Modify extcon device to be created after driver data is set Currently, someone can invoke the sysfs such as state_show() intermittently before dev_set_drvdata() is done. And it can be a cause of kernel Oops because of edev is Null at that time. So modified the driver registration to after setting drviver data. - Oops's backtrace. Backtrace: [<c067865c>] (state_show) from [<c05222e8>] (dev_attr_show) [<c05222c0>] (dev_attr_show) from [<c02c66e0>] (sysfs_kf_seq_show) [<c02c6648>] (sysfs_kf_seq_show) from [<c02c496c>] (kernfs_seq_show) [<c02c4938>] (kernfs_seq_show) from [<c025e2a0>] (seq_read) [<c025e11c>] (seq_read) from [<c02c50a0>] (kernfs_fop_read) [<c02c5064>] (kernfs_fop_read) from [<c0231cac>] (__vfs_read) [<c0231c5c>] (__vfs_read) from [<c0231ee0>] (vfs_read) [<c0231e34>] (vfs_read) from [<c0232464>] (ksys_read) [<c02323f0>] (ksys_read) from [<c02324fc>] (sys_read) [<c02324e4>] (sys_read) from [<c00091d0>] (__sys_trace_return)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.14.2833.5 ≤ v < 4.14.2833.5 ≤ v < 4.19.2473.5 ≤ v < 5.10.1223.5 ≤ v < 5.15.473.5 ≤ v < 5.17.153.5 ≤ v < 5.18.43.5 ≤ v < 5.193.5 ≤ v < 5.4.1984.15 ≤ v < 4.19.2474.20 ≤ v < 5.4.1985.11 ≤ v < 5.15.475.16 ≤ v < 5.17.155.18 ≤ v < 5.18.45.5 ≤ v < 5.10.1223.5de55d8716ac50a356cea736c29bb7db5ac3d0190

Vendor states this is fixed in 033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c (fixed)

Vendor states this is fixed in 35ff1ac55d301efb3f467cf5426faaeb3452994b (fixed)

Vendor states this is fixed in 368e68ad6da4317fc4170e8d92b51c13d1bfe7a7 (fixed)

Vendor states this is fixed in 5dcc2afe716d69f5112ce035cb14f007461ff189 (fixed)

Vendor states this is fixed in 6e721f3ad0535b24f19a62420f4da95212cf069c (fixed)

Vendor states this is fixed in abf3b222614f49f98e606fccdd269161c0d70204 (fixed)

Vendor states this is fixed in cb81ea998c461868d1168411a867d8ffee12f23f (fixed)

Vendor states this is fixed in d472c78cc82999d07bd09193a6718016ce9cd386 (fixed)

Vendor states this is fixed in 3.5 (unaffected)

Vendor states this is fixed in 4.14.283 (unaffected)

Vendor states this is fixed in 4.19.247 (unaffected)

Vendor states this is fixed in 5.10.122 (unaffected)