---
id: CVE-2022-49825
title: 'ata: libata-transport: fix error handling in ata_tport_add()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ata: libata-transport: fix error handling in ata_tport_add()

  In ata_tport_add(), the return value of transport_add_device() is
  not checked. As a result, it causes null…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 <
    b5362dc1634d8b8d5f30920f33ac11a3276b7ed9
  - >-
    Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 <
    e7bb1b7a7bf26f6b7372b7b683daece4a42fda02
  - >-
    Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 <
    52d9bb0adae9359711a0c5271430afd3754069e7
  - >-
    Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 <
    3613dbe3909dcc637fe6be00e4dc43b4aa0470ee
  - Linux 2.6.37
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T19:49:53.013203Z'
published: '2025-05-01'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:00:08.352Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-49825'
references:
  - url: 'https://git.kernel.org/stable/c/b5362dc1634d8b8d5f30920f33ac11a3276b7ed9'
  - url: 'https://git.kernel.org/stable/c/e7bb1b7a7bf26f6b7372b7b683daece4a42fda02'
  - url: 'https://git.kernel.org/stable/c/52d9bb0adae9359711a0c5271430afd3754069e7'
  - url: 'https://git.kernel.org/stable/c/3613dbe3909dcc637fe6be00e4dc43b4aa0470ee'
tags:
  - cve.org
epss: 0.00216
epssPercentile: 0.12184
ingestedAt: '2026-11-05T22:38:31.614Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ata: libata-transport: fix error handling in ata_tport_add()

In ata_tport_add(), the return value of transport_add_device() is
not checked. As a result, it causes null-ptr-deref while removing
the module, because transport_remove_device() is called to remove
the device that was not added.

Unable to handle kernel NULL pointer dereference at virtual address 00000000000000d0
CPU: 12 PID: 13605 Comm: rmmod Kdump: loaded Tainted: G        W          6.1.0-rc3+ #8
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : device_del+0x48/0x39c
lr : device_del+0x44/0x39c
Call trace:
 device_del+0x48/0x39c
 attribute_container_class_device_del+0x28/0x40
 transport_remove_classdev+0x60/0x7c
 attribute_container_device_trigger+0x118/0x120
 transport_remove_device+0x20/0x30
 ata_tport_delete+0x34/0x60 [libata]
 ata_port_detach+0x148/0x1b0 [libata]
 ata_pci_remove_one+0x50/0x80 [libata]
 ahci_remove_one+0x4c/0x8c [ahci]

Fix this by checking and handling return value of transport_add_device()
in ata_tport_add().

## Affected

- `Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < b5362dc1634d8b8d5f30920f33ac11a3276b7ed9`
- `Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < e7bb1b7a7bf26f6b7372b7b683daece4a42fda02`
- `Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < 52d9bb0adae9359711a0c5271430afd3754069e7`
- `Linux >= d9027470b88631d0956ac37cdadfdeb9cdcf2c99 < 3613dbe3909dcc637fe6be00e4dc43b4aa0470ee`
- `Linux 2.6.37`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.