{"id":"CVE-2022-49832","title":"pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map\n\nHere is the BUG report by KASAN about null pointer dereference:\n\nBUG: KASAN: null-ptr-deref in…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < aaf552c5d53abe4659176e099575fe870d2e4768","Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < b4d9f55cd38435358bc16d580612bc0d798d7b4c","Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < a988dcd3dd9e691c5ccc3324b209688f3b5453e9","Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 040f726fecd88121f3b95e70369785ad452dddf9","Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 777430aa4ddccaa5accec6db90ffc1d47f00d471","Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 97e5b508e96176f1a73888ed89df396d7041bfcb","Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 5834a3a98cd266ad35a229923c0adbd0addc8d68","Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 91d5c5060ee24fe8da88cd585bb43b843d2f0dce","Linux 3.5"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T19:50:21.700788Z"},"published":"2025-05-01","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:00:08.996Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-49832","references":[{"url":"https://git.kernel.org/stable/c/aaf552c5d53abe4659176e099575fe870d2e4768"},{"url":"https://git.kernel.org/stable/c/b4d9f55cd38435358bc16d580612bc0d798d7b4c"},{"url":"https://git.kernel.org/stable/c/a988dcd3dd9e691c5ccc3324b209688f3b5453e9"},{"url":"https://git.kernel.org/stable/c/040f726fecd88121f3b95e70369785ad452dddf9"},{"url":"https://git.kernel.org/stable/c/777430aa4ddccaa5accec6db90ffc1d47f00d471"},{"url":"https://git.kernel.org/stable/c/97e5b508e96176f1a73888ed89df396d7041bfcb"},{"url":"https://git.kernel.org/stable/c/5834a3a98cd266ad35a229923c0adbd0addc8d68"},{"url":"https://git.kernel.org/stable/c/91d5c5060ee24fe8da88cd585bb43b843d2f0dce"}],"tags":["cve.org"],"epss":0.00218,"epssPercentile":0.12322,"ingestedAt":"2026-11-05T22:38:31.616Z","slug":"CVE-2022-49832","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map\n\nHere is the BUG report by KASAN about null pointer dereference:\n\nBUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50\nRead of size 1 at addr 0000000000000000 by task python3/2640\nCall Trace:\n strcmp\n __of_find_property\n of_find_property\n pinctrl_dt_to_map\n\nkasprintf() would return NULL pointer when kmalloc() fail to allocate.\nSo directly return ENOMEM, if kasprintf() return NULL pointer.\n\n## Affected\n\n- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < aaf552c5d53abe4659176e099575fe870d2e4768`\n- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < b4d9f55cd38435358bc16d580612bc0d798d7b4c`\n- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < a988dcd3dd9e691c5ccc3324b209688f3b5453e9`\n- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 040f726fecd88121f3b95e70369785ad452dddf9`\n- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 777430aa4ddccaa5accec6db90ffc1d47f00d471`\n- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 97e5b508e96176f1a73888ed89df396d7041bfcb`\n- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 5834a3a98cd266ad35a229923c0adbd0addc8d68`\n- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 91d5c5060ee24fe8da88cd585bb43b843d2f0dce`\n- `Linux 3.5`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}