CVE-2022-49731
Linux Kernel Null Pointer Dereference in ata Library
Description
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and probably wrong?) case that the 'ppi' parameter of ata_host_alloc_pinfo() points to an array starting with a NULL pointer, there's going to be a kernel oops as the 'pi' local variable won't get reassigned from the initial value of NULL. Initialize 'pi' instead to '&ata_dummy_port_info' to fix the possible kernel oops for good... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
INFO
Published Date :
Feb. 26, 2025, 7:01 a.m.
Last Modified :
March 7, 2025, 8:44 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Apply the kernel patch for the 'ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()'.
- Ensure the 'pi' variable is initialized correctly.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2022-49731.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2022-49731 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2022-49731
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2022-49731 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2022-49731 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Mar. 07, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-476 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (excluding) 4.9.320 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.10 from (excluding) 4.14.285 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.15 from (excluding) 4.19.249 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 from (excluding) 5.4.200 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 from (excluding) 5.15.49 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 from (excluding) 5.10.124 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 from (excluding) 5.18.6 Added Reference Type kernel.org: https://git.kernel.org/stable/c/07cbdb4807d369fbda73062a91b570c4dc5ec429 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/1ac5efee33f29e704226506d429b84575a5d66f8 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/253334f84c81bc6a43af489f108c0bddad989eef Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/36cd19e7d4e5571d77a2ed20c5b6ef50cf57734a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/a810bd5af06977a847d1f202b22d7defd5c62497 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/bf476fe22aa1851bab4728e0c49025a6a0bea307 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ca4693e6e06e4fd2b240c0fec47aa2498c94848e Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ff128fbea720bf763fa345680dda5f050bc24a47 Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 26, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and probably wrong?) case that the 'ppi' parameter of ata_host_alloc_pinfo() points to an array starting with a NULL pointer, there's going to be a kernel oops as the 'pi' local variable won't get reassigned from the initial value of NULL. Initialize 'pi' instead to '&ata_dummy_port_info' to fix the possible kernel oops for good... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool. Added Reference https://git.kernel.org/stable/c/07cbdb4807d369fbda73062a91b570c4dc5ec429 Added Reference https://git.kernel.org/stable/c/1ac5efee33f29e704226506d429b84575a5d66f8 Added Reference https://git.kernel.org/stable/c/253334f84c81bc6a43af489f108c0bddad989eef Added Reference https://git.kernel.org/stable/c/36cd19e7d4e5571d77a2ed20c5b6ef50cf57734a Added Reference https://git.kernel.org/stable/c/a810bd5af06977a847d1f202b22d7defd5c62497 Added Reference https://git.kernel.org/stable/c/bf476fe22aa1851bab4728e0c49025a6a0bea307 Added Reference https://git.kernel.org/stable/c/ca4693e6e06e4fd2b240c0fec47aa2498c94848e Added Reference https://git.kernel.org/stable/c/ff128fbea720bf763fa345680dda5f050bc24a47