CVE-2022-49072

Advisory lineage Upstream: 0 Downstream: 15
Analyzed
Published: 26 Feb 2025, 01:54
Last modified:23 May 2026, 15:21

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.1% LOW
0% probability +0.05%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Feb 2025, 01:54
Published
Vulnerability first disclosed
23 May 2026, 15:21
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: Restrict usage of GPIO chip irq members before initialization GPIO chip irq members are exposed before they could be completely initialized and this leads to race conditions. One such issue was observed for the gc->irq.domain variable which was accessed through the I2C interface in gpiochip_to_irq() before it could be initialized by gpiochip_add_irqchip(). This resulted in Kernel NULL pointer dereference. Following are the logs for reference :- kernel: Call Trace: kernel: gpiod_to_irq+0x53/0x70 kernel: acpi_dev_gpio_irq_get_by+0x113/0x1f0 kernel: i2c_acpi_get_irq+0xc0/0xd0 kernel: i2c_device_probe+0x28a/0x2a0 kernel: really_probe+0xf2/0x460 kernel: RIP: 0010:gpiochip_to_irq+0x47/0xc0 To avoid such scenarios, restrict usage of GPIO chip irq members before they are completely initialized.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.10%• Percentile: 28%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • linux•linux

    ≥ 48057ed1840fde9239b1e000bea1a0a1f07c5e99, < 7e88a50704b0c49ad3f2d11e8b963341cf68a89f | ≥ 48057ed1840fde9239b1e000bea1a0a1f07c5e99, < 0912cf021fb5749372b3782611d8b1de4986c13a | ≥ 48057ed1840fde9239b1e000bea1a0a1f07c5e99, < 2c1fa3614795e2b24da1ba95de0b27b8f6ea4537 | ≥ 48057ed1840fde9239b1e000bea1a0a1f07c5e99, < f8dea54f74cae8c2e4d7b2952e8fed7743a85c87 | ≥ 48057ed1840fde9239b1e000bea1a0a1f07c5e99, < 5467801f1fcbdc46bc7298a84dbf3ca1ff2a7320 | 44dfa46aaf7cf594ac89bc1a0c0e56c498b31269 | ≥ 5.2.14, < 5.3 | 5.3

  • linux•linux_kernel

    < 5.10.111 | ≥ 5.11, < 5.15.34 | ≥ 5.16, < 5.16.20 | ≥ 5.17, < 5.17.3 | 5.18:rc1

References (5)