CVE-2022-49375

rtc: mt6397: check return value after calling platform_get_resource()

MEDIUM
5.5
CVSS Score
Published: February 26, 2025 at 02:11 AM UTC
Updated: June 17, 2026 at 05:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: rtc: mt6397: check return value after calling platform_get_resource() It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.10 ≤ v < 4.14.2834.15 ≤ v < 4.19.2474.2 ≤ v < 4.14.2834.2 ≤ v < 4.19.2474.2 ≤ v < 4.9.3184.2 ≤ v < 5.10.1224.2 ≤ v < 5.15.474.2 ≤ v < 5.17.154.2 ≤ v < 5.18.44.2 ≤ v < 5.194.2 ≤ v < 5.4.1984.20 ≤ v < 5.4.1985.11 ≤ v < 5.15.475.16 ≤ v < 5.17.155.18 ≤ v < 5.18.45.5 ≤ v < 5.10.1224.2fc2979118f3f5193475cb53d5df7bdaa7e358a42
Vendor states this is fixed in 3867f0bbb94773d41e789257abec0d14f37da217 (fixed)
Vendor states this is fixed in 58a729c55ce3a432eb827fdaa24c7909cd3b0a6b (fixed)
Vendor states this is fixed in 6ecd4d5c28408df36a1a6f0b1973f633c949ac1f (fixed)
Vendor states this is fixed in 79fa3f5758d8712df0678df98161f948fc4370e5 (fixed)
Vendor states this is fixed in 82bfea344e8f7e9a0e0b1bf9af27552baa756620 (fixed)
Vendor states this is fixed in 865051de2d9eaa50630e055b73921ceaf3c4a7fc (fixed)
Vendor states this is fixed in d3b43eb505bffb8e4cdf6800c15660c001553fe6 (fixed)
Vendor states this is fixed in d77f28c1bc9d3043a52069fe42e4a26fbf961ebd (fixed)
Vendor states this is fixed in da38e86d6cf6dd3bc65c602d998f357145aa1a0b (fixed)
Vendor states this is fixed in 4.14.283 (unaffected)
Vendor states this is fixed in 4.19.247 (unaffected)
Vendor states this is fixed in 4.2 (unaffected)
Vendor states this is fixed in 4.9.318 (unaffected)
Vendor states this is fixed in 5.10.122 (unaffected)
Vendor states this is fixed in 5.15.47 (unaffected)
Vendor states this is fixed in 5.17.15 (unaffected)
Vendor states this is fixed in 5.18.4 (unaffected)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 5.4.198 (unaffected)

References (9)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3867f0bbb94773d41e789257abec0d14f37da217
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/58a729c55ce3a432eb827fdaa24c7909cd3b0a6b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6ecd4d5c28408df36a1a6f0b1973f633c949ac1f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/79fa3f5758d8712df0678df98161f948fc4370e5
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/82bfea344e8f7e9a0e0b1bf9af27552baa756620
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/865051de2d9eaa50630e055b73921ceaf3c4a7fc
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d3b43eb505bffb8e4cdf6800c15660c001553fe6
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d77f28c1bc9d3043a52069fe42e4a26fbf961ebd

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card