{
  "cveId": "CVE-2022-49424",
  "url": "https://patchblox.com/security/cve/CVE-2022-49424",
  "summary": "CVE-2022-49424 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49424, released February 26, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/mediatek: Fix NULL pointer dereference whe...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  iommu/mediatek: Fix NULL pointer dereference when printing dev_name  When larbdev is NULL (in the case I hit, the node is incorrectly set iommus = \u003C\u0026iommu NUM\u003E), it will cause device_link_add() fail and kernel crashes when we try to print dev_name(larbdev).  Let\u0027s fail the probe if a larbdev is NULL to avoid invalid inputs from dts.  It should work for normal correct setting and avoid the crash caused by my incorrect setting.  Error log: [   18.189042][  T301] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000050 ... [   18.344519][  T301] pstate: a0400005 (NzCv daif \u002BPAN -UAO) [   18.345213][  T301] pc : mtk_iommu_probe_device\u002B0xf8/0x118 [mtk_iommu] [   18.346050][  T301] lr : mtk_iommu_probe_device\u002B0xd0/0x118 [mtk_iommu] [   18.346884][  T301] sp : ffffffc00a5635e0 [   18.347392][  T301] x29: ffffffc00a5635e0 x28: ffffffd44a46c1d8 [   18.348156][  T301] x27: ffffff80c39a8000 x26: ffffffd44a80cc38 [   18.348917][  T301] x25: 0000000000000000 x24: ffffffd44a80cc38 [   18.349677][  T301] x23: ffffffd44e4da4c6 x22: ffffffd44a80cc38 [   18.350438][  T301] x21: ffffff80cecd1880 x20: 0000000000000000 [   18.351198][  T301] x19: ffffff80c439f010 x18: ffffffc00a50d0c0 [   18.351959][  T301] x17: ffffffffffffffff x16: 0000000000000004 [   18.352719][  T301] x15: 0000000000000004 x14: ffffffd44eb5d420 [   18.353480][  T301] x13: 0000000000000ad2 x12: 0000000000000003 [   18.354241][  T301] x11: 00000000fffffad2 x10: c0000000fffffad2 [   18.355003][  T301] x9 : a0d288d8d7142d00 x8 : a0d288d8d7142d00 [   18.355763][  T301] x7 : ffffffd44c2bc640 x6 : 0000000000000000 [   18.356524][  T301] x5 : 0000000000000080 x4 : 0000000000000001 [   18.357284][  T301] x3 : 0000000000000000 x2 : 0000000000000005 [   18.358045][  T301] x1 : 0000000000000000 x0 : 0000000000000000 [   18.360208][  T301] Hardware name: MT6873 (DT) [   18.360771][  T301] Call trace: [   18.361168][  T301]  dump_backtrace\u002B0xf8/0x1f0 [   18.361737][  T301]  dump_stack_lvl\u002B0xa8/0x11c [   18.362305][  T301]  dump_stack\u002B0x1c/0x2c [   18.362816][  T301]  mrdump_common_die\u002B0x184/0x40c [mrdump] [   18.363575][  T301]  ipanic_die\u002B0x24/0x38 [mrdump] [   18.364230][  T301]  atomic_notifier_call_chain\u002B0x128/0x2b8 [   18.364937][  T301]  die\u002B0x16c/0x568 [   18.365394][  T301]  __do_kernel_fault\u002B0x1e8/0x214 [   18.365402][  T301]  do_page_fault\u002B0xb8/0x678 [   18.366934][  T301]  do_translation_fault\u002B0x48/0x64 [   18.368645][  T301]  do_mem_abort\u002B0x68/0x148 [   18.368652][  T301]  el1_abort\u002B0x40/0x64 [   18.368660][  T301]  el1h_64_sync_handler\u002B0x54/0x88 [   18.368668][  T301]  el1h_64_sync\u002B0x68/0x6c [   18.368673][  T301]  mtk_iommu_probe_device\u002B0xf8/0x118 [mtk_iommu] ...",
  "published": "2025-02-26T07:01:18Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00268,
  "epssPercentile": 0.19082,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.18.5-1",
      "fix": "DEBIAN-CVE-2022-49424",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49424",
      "released": "2025-02-26T07:01:18Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.18.5-1",
      "fix": "DEBIAN-CVE-2022-49424",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49424",
      "released": "2025-02-26T07:01:18Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.18.5-1",
      "fix": "DEBIAN-CVE-2022-49424",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49424",
      "released": "2025-02-26T07:01:18Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}