CVE-2022-49009 - hwmon: (asus-ec-sensors) Add checks for devm_kcalloc

MEDIUM

hwmon: (asus-ec-sensors) Add checks for devm_kcalloc

Published Oct 21, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.20%

As the devm_kcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
	affected
	affected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-49009		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2320791		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53893		Advisory
https://git.kernel.org/stable/c/9bdc112be727cf1ba65be79541147f960c3349d8		Patch
https://git.kernel.org/stable/c/a41ec58ac352fd176d5808af847663dc890f6053		Patch
https://lore.kernel.org/linux-cve-announce/2024102152-CVE-2022-49009-9bee@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-49009
https://www.cve.org/CVERecord?id=CVE-2022-49009