{"id":"CVE-2022-49825","title":"ata: libata-transport: fix error handling in ata_tport_add()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nata: libata-transport: fix error handling in ata_tport_add()\n\nIn ata_tport_add(), the return value of transport_add_device() is\nnot checked. As a result, it causes null…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < b5362dc1634d8b8d5f30920f33ac11a3276b7ed9","Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < e7bb1b7a7bf26f6b7372b7b683daece4a42fda02","Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < 52d9bb0adae9359711a0c5271430afd3754069e7","Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < 3613dbe3909dcc637fe6be00e4dc43b4aa0470ee","Linux 2.6.37"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T19:49:53.013203Z"},"published":"2025-05-01","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:00:08.352Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-49825","references":[{"url":"https://git.kernel.org/stable/c/b5362dc1634d8b8d5f30920f33ac11a3276b7ed9"},{"url":"https://git.kernel.org/stable/c/e7bb1b7a7bf26f6b7372b7b683daece4a42fda02"},{"url":"https://git.kernel.org/stable/c/52d9bb0adae9359711a0c5271430afd3754069e7"},{"url":"https://git.kernel.org/stable/c/3613dbe3909dcc637fe6be00e4dc43b4aa0470ee"}],"tags":["cve.org"],"epss":0.00216,"epssPercentile":0.12184,"ingestedAt":"2026-11-05T22:38:31.614Z","slug":"CVE-2022-49825","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nata: libata-transport: fix error handling in ata_tport_add()\n\nIn ata_tport_add(), the return value of transport_add_device() is\nnot checked. As a result, it causes null-ptr-deref while removing\nthe module, because transport_remove_device() is called to remove\nthe device that was not added.\n\nUnable to handle kernel NULL pointer dereference at virtual address 00000000000000d0\nCPU: 12 PID: 13605 Comm: rmmod Kdump: loaded Tainted: G        W          6.1.0-rc3+ #8\npstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : device_del+0x48/0x39c\nlr : device_del+0x44/0x39c\nCall trace:\n device_del+0x48/0x39c\n attribute_container_class_device_del+0x28/0x40\n transport_remove_classdev+0x60/0x7c\n attribute_container_device_trigger+0x118/0x120\n transport_remove_device+0x20/0x30\n ata_tport_delete+0x34/0x60 [libata]\n ata_port_detach+0x148/0x1b0 [libata]\n ata_pci_remove_one+0x50/0x80 [libata]\n ahci_remove_one+0x4c/0x8c [ahci]\n\nFix this by checking and handling return value of transport_add_device()\nin ata_tport_add().\n\n## Affected\n\n- `Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < b5362dc1634d8b8d5f30920f33ac11a3276b7ed9`\n- `Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < e7bb1b7a7bf26f6b7372b7b683daece4a42fda02`\n- `Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < 52d9bb0adae9359711a0c5271430afd3754069e7`\n- `Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < 3613dbe3909dcc637fe6be00e4dc43b4aa0470ee`\n- `Linux 2.6.37`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}