---
id: CVE-2022-49308
title: 'extcon: Modify extcon device to be created after driver data is set'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  extcon: Modify extcon device to be created after driver data is set

  Currently, someone can invoke the sysfs such as state_show()
  intermittently before dev_set_drvdata(…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 <
    6e721f3ad0535b24f19a62420f4da95212cf069c
  - >-
    Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 <
    cb81ea998c461868d1168411a867d8ffee12f23f
  - >-
    Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 <
    d472c78cc82999d07bd09193a6718016ce9cd386
  - >-
    Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 <
    abf3b222614f49f98e606fccdd269161c0d70204
  - >-
    Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 <
    368e68ad6da4317fc4170e8d92b51c13d1bfe7a7
  - >-
    Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 <
    35ff1ac55d301efb3f467cf5426faaeb3452994b
  - >-
    Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 <
    033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c
  - >-
    Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 <
    5dcc2afe716d69f5112ce035cb14f007461ff189
  - Linux 3.5
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T19:45:07.347141Z'
published: '2025-02-26'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T19:49:38.524Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-49308'
references:
  - url: 'https://git.kernel.org/stable/c/6e721f3ad0535b24f19a62420f4da95212cf069c'
  - url: 'https://git.kernel.org/stable/c/cb81ea998c461868d1168411a867d8ffee12f23f'
  - url: 'https://git.kernel.org/stable/c/d472c78cc82999d07bd09193a6718016ce9cd386'
  - url: 'https://git.kernel.org/stable/c/abf3b222614f49f98e606fccdd269161c0d70204'
  - url: 'https://git.kernel.org/stable/c/368e68ad6da4317fc4170e8d92b51c13d1bfe7a7'
  - url: 'https://git.kernel.org/stable/c/35ff1ac55d301efb3f467cf5426faaeb3452994b'
  - url: 'https://git.kernel.org/stable/c/033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c'
  - url: 'https://git.kernel.org/stable/c/5dcc2afe716d69f5112ce035cb14f007461ff189'
tags:
  - cve.org
epss: 0.00284
epssPercentile: 0.21093
ingestedAt: '2026-11-05T22:38:31.570Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

extcon: Modify extcon device to be created after driver data is set

Currently, someone can invoke the sysfs such as state_show()
intermittently before dev_set_drvdata() is done.
And it can be a cause of kernel Oops because of edev is Null at that time.
So modified the driver registration to after setting drviver data.

- Oops's backtrace.

Backtrace:
[<c067865c>] (state_show) from [<c05222e8>] (dev_attr_show)
[<c05222c0>] (dev_attr_show) from [<c02c66e0>] (sysfs_kf_seq_show)
[<c02c6648>] (sysfs_kf_seq_show) from [<c02c496c>] (kernfs_seq_show)
[<c02c4938>] (kernfs_seq_show) from [<c025e2a0>] (seq_read)
[<c025e11c>] (seq_read) from [<c02c50a0>] (kernfs_fop_read)
[<c02c5064>] (kernfs_fop_read) from [<c0231cac>] (__vfs_read)
[<c0231c5c>] (__vfs_read) from [<c0231ee0>] (vfs_read)
[<c0231e34>] (vfs_read) from [<c0232464>] (ksys_read)
[<c02323f0>] (ksys_read) from [<c02324fc>] (sys_read)
[<c02324e4>] (sys_read) from [<c00091d0>] (__sys_trace_return)

## Affected

- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 6e721f3ad0535b24f19a62420f4da95212cf069c`
- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < cb81ea998c461868d1168411a867d8ffee12f23f`
- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < d472c78cc82999d07bd09193a6718016ce9cd386`
- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < abf3b222614f49f98e606fccdd269161c0d70204`
- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 368e68ad6da4317fc4170e8d92b51c13d1bfe7a7`
- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 35ff1ac55d301efb3f467cf5426faaeb3452994b`
- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c`
- `Linux >= de55d8716ac50a356cea736c29bb7db5ac3d0190 < 5dcc2afe716d69f5112ce035cb14f007461ff189`
- `Linux 3.5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.