{"id":"CVE-2022-49308","title":"extcon: Modify extcon device to be created after driver data is set","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nextcon: Modify extcon device to be created after driver data is set\n\nCurrently, someone can invoke the sysfs such as state_show()\nintermittently before dev_set_drvdata(…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 6e721f3ad0535b24f19a62420f4da95212cf069c","Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < cb81ea998c461868d1168411a867d8ffee12f23f","Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < d472c78cc82999d07bd09193a6718016ce9cd386","Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < abf3b222614f49f98e606fccdd269161c0d70204","Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 368e68ad6da4317fc4170e8d92b51c13d1bfe7a7","Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 35ff1ac55d301efb3f467cf5426faaeb3452994b","Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c","Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 5dcc2afe716d69f5112ce035cb14f007461ff189","Linux 3.5"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T19:45:07.347141Z"},"published":"2025-02-26","updated":"2026-11-05","sourceUpdated":"2026-11-05T19:49:38.524Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-49308","references":[{"url":"https://git.kernel.org/stable/c/6e721f3ad0535b24f19a62420f4da95212cf069c"},{"url":"https://git.kernel.org/stable/c/cb81ea998c461868d1168411a867d8ffee12f23f"},{"url":"https://git.kernel.org/stable/c/d472c78cc82999d07bd09193a6718016ce9cd386"},{"url":"https://git.kernel.org/stable/c/abf3b222614f49f98e606fccdd269161c0d70204"},{"url":"https://git.kernel.org/stable/c/368e68ad6da4317fc4170e8d92b51c13d1bfe7a7"},{"url":"https://git.kernel.org/stable/c/35ff1ac55d301efb3f467cf5426faaeb3452994b"},{"url":"https://git.kernel.org/stable/c/033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c"},{"url":"https://git.kernel.org/stable/c/5dcc2afe716d69f5112ce035cb14f007461ff189"}],"tags":["cve.org"],"epss":0.00284,"epssPercentile":0.21093,"ingestedAt":"2026-11-05T22:38:31.570Z","slug":"CVE-2022-49308","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nextcon: Modify extcon device to be created after driver data is set\n\nCurrently, someone can invoke the sysfs such as state_show()\nintermittently before dev_set_drvdata() is done.\nAnd it can be a cause of kernel Oops because of edev is Null at that time.\nSo modified the driver registration to after setting drviver data.\n\n- Oops's backtrace.\n\nBacktrace:\n[<c067865c>] (state_show) from [<c05222e8>] (dev_attr_show)\n[<c05222c0>] (dev_attr_show) from [<c02c66e0>] (sysfs_kf_seq_show)\n[<c02c6648>] (sysfs_kf_seq_show) from [<c02c496c>] (kernfs_seq_show)\n[<c02c4938>] (kernfs_seq_show) from [<c025e2a0>] (seq_read)\n[<c025e11c>] (seq_read) from [<c02c50a0>] (kernfs_fop_read)\n[<c02c5064>] (kernfs_fop_read) from [<c0231cac>] (__vfs_read)\n[<c0231c5c>] (__vfs_read) from [<c0231ee0>] (vfs_read)\n[<c0231e34>] (vfs_read) from [<c0232464>] (ksys_read)\n[<c02323f0>] (ksys_read) from [<c02324fc>] (sys_read)\n[<c02324e4>] (sys_read) from [<c00091d0>] (__sys_trace_return)\n\n## Affected\n\n- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 6e721f3ad0535b24f19a62420f4da95212cf069c`\n- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < cb81ea998c461868d1168411a867d8ffee12f23f`\n- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < d472c78cc82999d07bd09193a6718016ce9cd386`\n- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < abf3b222614f49f98e606fccdd269161c0d70204`\n- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 368e68ad6da4317fc4170e8d92b51c13d1bfe7a7`\n- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 35ff1ac55d301efb3f467cf5426faaeb3452994b`\n- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c`\n- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 5dcc2afe716d69f5112ce035cb14f007461ff189`\n- `Linux 3.5`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}