---
id: CVE-2022-49832
title: 'pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map

  Here is the BUG report by KASAN about null pointer dereference:

  BUG: KASAN: null-ptr-deref in…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 <
    aaf552c5d53abe4659176e099575fe870d2e4768
  - >-
    Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 <
    b4d9f55cd38435358bc16d580612bc0d798d7b4c
  - >-
    Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 <
    a988dcd3dd9e691c5ccc3324b209688f3b5453e9
  - >-
    Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 <
    040f726fecd88121f3b95e70369785ad452dddf9
  - >-
    Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 <
    777430aa4ddccaa5accec6db90ffc1d47f00d471
  - >-
    Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 <
    97e5b508e96176f1a73888ed89df396d7041bfcb
  - >-
    Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 <
    5834a3a98cd266ad35a229923c0adbd0addc8d68
  - >-
    Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 <
    91d5c5060ee24fe8da88cd585bb43b843d2f0dce
  - Linux 3.5
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T19:50:21.700788Z'
published: '2025-05-01'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:00:08.996Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-49832'
references:
  - url: 'https://git.kernel.org/stable/c/aaf552c5d53abe4659176e099575fe870d2e4768'
  - url: 'https://git.kernel.org/stable/c/b4d9f55cd38435358bc16d580612bc0d798d7b4c'
  - url: 'https://git.kernel.org/stable/c/a988dcd3dd9e691c5ccc3324b209688f3b5453e9'
  - url: 'https://git.kernel.org/stable/c/040f726fecd88121f3b95e70369785ad452dddf9'
  - url: 'https://git.kernel.org/stable/c/777430aa4ddccaa5accec6db90ffc1d47f00d471'
  - url: 'https://git.kernel.org/stable/c/97e5b508e96176f1a73888ed89df396d7041bfcb'
  - url: 'https://git.kernel.org/stable/c/5834a3a98cd266ad35a229923c0adbd0addc8d68'
  - url: 'https://git.kernel.org/stable/c/91d5c5060ee24fe8da88cd585bb43b843d2f0dce'
tags:
  - cve.org
epss: 0.00218
epssPercentile: 0.12322
ingestedAt: '2026-11-05T22:38:31.616Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map

Here is the BUG report by KASAN about null pointer dereference:

BUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50
Read of size 1 at addr 0000000000000000 by task python3/2640
Call Trace:
 strcmp
 __of_find_property
 of_find_property
 pinctrl_dt_to_map

kasprintf() would return NULL pointer when kmalloc() fail to allocate.
So directly return ENOMEM, if kasprintf() return NULL pointer.

## Affected

- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < aaf552c5d53abe4659176e099575fe870d2e4768`
- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < b4d9f55cd38435358bc16d580612bc0d798d7b4c`
- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < a988dcd3dd9e691c5ccc3324b209688f3b5453e9`
- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 040f726fecd88121f3b95e70369785ad452dddf9`
- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 777430aa4ddccaa5accec6db90ffc1d47f00d471`
- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 97e5b508e96176f1a73888ed89df396d7041bfcb`
- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 5834a3a98cd266ad35a229923c0adbd0addc8d68`
- `Linux >= 57291ce295c0aca738dd284c4a9c591c09ebee71 < 91d5c5060ee24fe8da88cd585bb43b843d2f0dce`
- `Linux 3.5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.