Vulnerabilities > CVE-2022-49141 - NULL Pointer Dereference vulnerability in Linux Kernel 5.17/5.17.1/5.17.2

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
linux
CWE-476

Summary

In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: fix possible NULL pointer dereference As the possible failure of the allocation, kzalloc() may return NULL pointer. Therefore, it should be better to check the 'sgi' in order to prevent the dereference of NULL pointer.

Vulnerable Configurations

Part Description Count
OS
Linux
11

Common Weakness Enumeration (CWE)