CVE-2022-49512
mtd: rawnand: denali: Use managed device resources
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: denali: Use managed device resources All of the resources used by this driver has managed interfaces, so use them. Otherwise we will get the following splat: [ 4.472703] denali-nand-pci 0000:00:05.0: timeout while waiting for irq 0x1000 [ 4.474071] denali-nand-pci: probe of 0000:00:05.0 failed with error -5 [ 4.473538] nand: No NAND device found [ 4.474068] BUG: unable to handle page fault for address: ffffc90005000410 [ 4.475169] #PF: supervisor write access in kernel mode [ 4.475579] #PF: error_code(0x0002) - not-present page [ 4.478362] RIP: 0010:iowrite32+0x9/0x50 [ 4.486068] Call Trace: [ 4.486269] <IRQ> [ 4.486443] denali_isr+0x15b/0x300 [denali] [ 4.486788] ? denali_direct_write+0x50/0x50 [denali] [ 4.487189] __handle_irq_event_percpu+0x161/0x3b0 [ 4.487571] handle_irq_event+0x7d/0x1b0 [ 4.487884] handle_fasteoi_irq+0x2b0/0x770 [ 4.488219] __common_interrupt+0xc8/0x1b0 [ 4.488549] common_interrupt+0x9a/0xc0
Timeline
ID reserved
By Linux
Published
- 15 months later
· 15 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.26% · top 82% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 93db446a424cee9387b532995e6b516667079555 – < 3c68daf4a368cd9e63ae5a2145c9e4a6f838c166
- affected 93db446a424cee9387b532995e6b516667079555 – < 3830dbdfb9a4aec680e43ed80b9f23db7a88eac9
- affected 93db446a424cee9387b532995e6b516667079555 – < 87149cf9186201a63f0e0b93d9fa93d480bcb771
- affected 93db446a424cee9387b532995e6b516667079555 – < efea1dd176edd17c8252051b7de6957f06efc394
- affected 93db446a424cee9387b532995e6b516667079555 – < 3a745b51cddafade99aaea1b93aad31e9614e230
- affected 4.17
- unaffected < 4.17
- unaffected 5.10.121 – ≤ 5.10.*
- unaffected 5.15.46 – ≤ 5.15.*
- unaffected 5.17.14 – ≤ 5.17.*
- unaffected 5.18.3 – ≤ 5.18.*
- unaffected 5.19 – ≤ *
References (5)
- https://git.kernel.org/stable/c/3c68daf4a368cd9e63ae5a2145c9e4a6f838c166 (opens in a new tab)
- https://git.kernel.org/stable/c/3830dbdfb9a4aec680e43ed80b9f23db7a88eac9 (opens in a new tab)
- https://git.kernel.org/stable/c/87149cf9186201a63f0e0b93d9fa93d480bcb771 (opens in a new tab)
- https://git.kernel.org/stable/c/efea1dd176edd17c8252051b7de6957f06efc394 (opens in a new tab)
- https://git.kernel.org/stable/c/3a745b51cddafade99aaea1b93aad31e9614e230 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49512)Record last updated .