CVE-2022-48663 gpio: mockup: fix NULL pointer dereference when removing debugfs

2024-04-2813:01:36

Linux

www.cve.org

linux kernel

null pointer dereference

gpio mockup

debugfs

vulnerability

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

gpio: mockup: fix NULL pointer dereference when removing debugfs

We now remove the device’s debugfs entries when unbinding the driver.
This now causes a NULL-pointer dereference on module exit because the
platform devices are unregistered after the global debugfs directory
has been recursively removed. Fix it by unregistering the devices first.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpio/gpio-mockup.c"
    ],
    "versions": [
      {
        "version": "3815e66c2183",
        "lessThan": "bdea98b98f84",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3a10e8edee2b",
        "lessThan": "18352095a0d5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bc55c1677edb",
        "lessThan": "af0bfabf06c7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "303e6da99429",
        "lessThan": "b7df41a6f79d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpio/gpio-mockup.c"
    ],
    "versions": [
      {
        "version": "5.10.144",
        "lessThan": "5.10.146",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.15.69",
        "lessThan": "5.15.71",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.19.10",
        "lessThan": "5.19.12",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]