CVE-2022-49329

🗓️ 26 Feb 2025 02:10:50Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 137 Views🌐 WEB

Fixed NULL pointer dereference on sysfs access in Linux kernel vduse control device.

Reporter	Title	Published	Views	Family All 27
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
CNNVD	Linux kernel 安全漏洞	26 Feb 202500:00	–	cnnvd
Cvelist	CVE-2022-49329 vduse: Fix NULL pointer dereference on sysfs access	26 Feb 202502:10	–	cvelist
Debian CVE	CVE-2022-49329	26 Feb 202502:10	–	debiancve
EUVD	EUVD-2022-54899	3 Oct 202520:07	–	euvd
NVD	CVE-2022-49329	26 Feb 202507:01	–	nvd
OSV	CVE-2022-49329 vduse: Fix NULL pointer dereference on sysfs access	26 Feb 202502:10	–	osv
OSV	DEBIAN-CVE-2022-49329	26 Feb 202507:01	–	osv
OSV	RHSA-2024:9315 Red Hat Security Advisory: kernel security update	15 Nov 202421:33	–	osv
OSV	SUSE-SU-2025:1176-1 Security update for the Linux Kernel	8 Apr 202515:35	–	osv

NVD

Vulners

CNA

Node

linux linux_kernelRange5.15–5.15.47

linux linux_kernelRange5.16–5.17.15

linux linux_kernelRange5.18–5.18.4

linux linux_kernelMatch5.19rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/vdpa/vdpa_user/vduse_dev.c"
    ],
    "versions": [
      {
        "version": "c8a6153b6c59d95c0e091f053f6f180952ade91e",
        "lessThan": "3a7a81f4835dfda11f39fdd27586da14331896eb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c8a6153b6c59d95c0e091f053f6f180952ade91e",
        "lessThan": "30fd1b56621e187346f65d01fe34870634b15188",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c8a6153b6c59d95c0e091f053f6f180952ade91e",
        "lessThan": "b22fdee17ec62604060fb0fda5e1414b634666e1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c8a6153b6c59d95c0e091f053f6f180952ade91e",
        "lessThan": "b27ee76c74dc831d6e092eaebc2dfc9c0beed1c9",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/vdpa/vdpa_user/vduse_dev.c"
    ],
    "versions": [
      {
        "version": "5.15",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.15",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.47",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.17.15",
        "lessThanOrEqual": "5.17.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.18.4",
        "lessThanOrEqual": "5.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.19",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/30fd1b56621e187346f65d01fe34870634b15188
git	www.git.kernel.org/stable/c/b27ee76c74dc831d6e092eaebc2dfc9c0beed1c9
git	www.git.kernel.org/stable/c/3a7a81f4835dfda11f39fdd27586da14331896eb
git	www.git.kernel.org/stable/c/b22fdee17ec62604060fb0fda5e1414b634666e1

Parameter	Position	Path	Description	CWE
msg_timeout	path	sysfs/drivers/vdpa/vdpa_user/vduse_dev.c/msg_timeout	NULL pointer dereference when accessing the sysfs attribute msg_timeout due to control device lacking drvdata	CWE-476

11 May 2026 18:57Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.5

EPSS0.00143

SSVC

CWE-476