CVE-2022-49083
iommu/omap: Fix regression in probe for NULL pointer dereference
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/omap: Fix regression in probe for NULL pointer dereference Commit 3f6634d997db ("iommu: Use right way to retrieve iommu_ops") started triggering a NULL pointer dereference for some omap variants: __iommu_probe_device from probe_iommu_group+0x2c/0x38 probe_iommu_group from bus_for_each_dev+0x74/0xbc bus_for_each_dev from bus_iommu_probe+0x34/0x2e8 bus_iommu_probe from bus_set_iommu+0x80/0xc8 bus_set_iommu from omap_iommu_init+0x88/0xcc omap_iommu_init from do_one_initcall+0x44/0x24 This is caused by omap iommu probe returning 0 instead of ERR_PTR(-ENODEV) as noted by Jason Gunthorpe <[email protected]>. Looks like the regression already happened with an earlier commit 6785eb9105e3 ("iommu/omap: Convert to probe/release_device() call-backs") that changed the function return type and missed converting one place.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.25% · top 84% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 6785eb9105e3363aa51408c700a55e8b5f88fcf6 – < bd905fed87ce01ac010011bb8f44ed0140116ceb
- affected 6785eb9105e3363aa51408c700a55e8b5f88fcf6 – < 47e239117bd97c8556f9187af7a9a7938db4e021
- affected 6785eb9105e3363aa51408c700a55e8b5f88fcf6 – < ea518578aa8a9a0280605b53cc33f707e10c8178
- affected 6785eb9105e3363aa51408c700a55e8b5f88fcf6 – < 1d89f2b9eadbcf3ce93c6d7238f68299a1f84968
- affected 6785eb9105e3363aa51408c700a55e8b5f88fcf6 – < 71ff461c3f41f6465434b9e980c01782763e7ad8
- affected 5.8
- unaffected < 5.8
- unaffected 5.10.111 – ≤ 5.10.*
- unaffected 5.15.34 – ≤ 5.15.*
- unaffected 5.16.20 – ≤ 5.16.*
- unaffected 5.17.3 – ≤ 5.17.*
- unaffected 5.18 – ≤ *
References (5)
- https://git.kernel.org/stable/c/bd905fed87ce01ac010011bb8f44ed0140116ceb (opens in a new tab)
- https://git.kernel.org/stable/c/47e239117bd97c8556f9187af7a9a7938db4e021 (opens in a new tab)
- https://git.kernel.org/stable/c/ea518578aa8a9a0280605b53cc33f707e10c8178 (opens in a new tab)
- https://git.kernel.org/stable/c/1d89f2b9eadbcf3ce93c6d7238f68299a1f84968 (opens in a new tab)
- https://git.kernel.org/stable/c/71ff461c3f41f6465434b9e980c01782763e7ad8 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49083)Record last updated .