In the Linux kernel, the following vulnerability has been resolved: net: sparx5: switchdev: fix possible NULL pointer dereference As the possible failure of the allocation, devm_kzalloc() may return NULL pointer. Therefore, it should be better to check the 'db' in order to prevent the dereference of NULL pointer.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/0906f3a3df07835e37077d8971aac65347f2ed57 cve-icon cve-icon
https://git.kernel.org/stable/c/b375ea083fa649092cd016ac1f89a2d1fd8f8e8b cve-icon cve-icon
https://git.kernel.org/stable/c/c346791877e6ce923bb21e34b30c6f99326aa5a8 cve-icon cve-icon
https://git.kernel.org/stable/c/e7e1fff76c4c57688dc7d53a3b6212182d5628d0 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022615-CVE-2022-49184-4de2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49184 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49184 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 17 Mar 2025 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: sparx5: switchdev: fix possible NULL pointer dereference As the possible failure of the allocation, devm_kzalloc() may return NULL pointer. Therefore, it should be better to check the 'db' in order to prevent the dereference of NULL pointer.
Title net: sparx5: switchdev: fix possible NULL pointer dereference
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T01:55:34.554Z

Updated: 2025-10-01T19:56:59.722Z

Reserved: 2025-02-26T01:49:39.284Z

Link: CVE-2022-49184

cve-icon Vulnrichment

Updated: 2025-10-01T16:08:31.724Z

cve-icon NVD

Status : Modified

Published: 2025-02-26T07:00:55.520

Modified: 2025-10-01T20:15:53.250

Link: CVE-2022-49184

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49184 - Bugzilla