CVE-2022-49273
In the Linux kernel, the following vulnerability has been resolved: rtc: pl031: fix rtc features null pointer dereference When there is no interrupt line, rtc alarm feature is disabled.
Does this matter?
Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: rtc: pl031: fix rtc features null pointer dereference When there is no interrupt line, rtc alarm feature is disabled. The clearing of the alarm feature bit was being done prior to allocations of ldata->rtc device, resulting in a null pointer dereference. Clear RTC_FEATURE_ALARM after the rtc device is allocated.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.26% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/1b915703964f7e636961df04c540261dc55c6c70Patch
- https://git.kernel.org/stable/c/cd2722e411e8ab7e5ae41102f6925fa13dffdac5Patch
- https://git.kernel.org/stable/c/d274ce4a3dfd0b9a292667535578359b865765cbPatch
- https://git.kernel.org/stable/c/ea6af39f3da50c86367a71eb3cc674ade3ed244cPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.