github - ghsa-rq3p-6qpw-48cx

ghsa-rq3p-6qpw-48cx

Vulnerability from github

Published

2025-04-14 18:31

Modified

2025-04-14 18:31

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

rtc: pl031: fix rtc features null pointer dereference

When there is no interrupt line, rtc alarm feature is disabled.

The clearing of the alarm feature bit was being done prior to allocations of ldata->rtc device, resulting in a null pointer dereference.

Clear RTC_FEATURE_ALARM after the rtc device is allocated.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-49273"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-476"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-26T07:01:04Z",
    "severity": "MODERATE"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: pl031: fix rtc features null pointer dereference\n\nWhen there is no interrupt line, rtc alarm feature is disabled.\n\nThe clearing of the alarm feature bit was being done prior to allocations\nof ldata-\u003ertc device, resulting in a null pointer dereference.\n\nClear RTC_FEATURE_ALARM after the rtc device is allocated.",
  "id": "GHSA-rq3p-6qpw-48cx",
  "modified": "2025-04-14T18:31:48Z",
  "published": "2025-04-14T18:31:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49273"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1b915703964f7e636961df04c540261dc55c6c70"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/cd2722e411e8ab7e5ae41102f6925fa13dffdac5"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d274ce4a3dfd0b9a292667535578359b865765cb"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ea6af39f3da50c86367a71eb3cc674ade3ed244c"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2022-49273 (GCVE-0-2022-49273)

Vulnerability from cvelistv5

Published

2025-02-26 01:56

Modified

2025-05-04 08:33

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: rtc: pl031: fix rtc features null pointer dereference When there is no interrupt line, rtc alarm feature is disabled. The clearing of the alarm feature bit was being done prior to allocations of ldata->rtc device, resulting in a null pointer dereference. Clear RTC_FEATURE_ALARM after the rtc device is allocated.

References

▼	URL	Tags
	https://git.kernel.org/stable/c/cd2722e411e8ab7e5ae41102f6925fa13dffdac5
	https://git.kernel.org/stable/c/d274ce4a3dfd0b9a292667535578359b865765cb
	https://git.kernel.org/stable/c/1b915703964f7e636961df04c540261dc55c6c70
	https://git.kernel.org/stable/c/ea6af39f3da50c86367a71eb3cc674ade3ed244c

Impacted products

Vendor

Product

Version

▼

Linux

Version: d9b0dd54a1943f47a381a474f8ea2c94466110c0
Version: d9b0dd54a1943f47a381a474f8ea2c94466110c0
Version: d9b0dd54a1943f47a381a474f8ea2c94466110c0
Version: d9b0dd54a1943f47a381a474f8ea2c94466110c0

Linux

Version: 5.12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/rtc/rtc-pl031.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cd2722e411e8ab7e5ae41102f6925fa13dffdac5",
              "status": "affected",
              "version": "d9b0dd54a1943f47a381a474f8ea2c94466110c0",
              "versionType": "git"
            },
            {
              "lessThan": "d274ce4a3dfd0b9a292667535578359b865765cb",
              "status": "affected",
              "version": "d9b0dd54a1943f47a381a474f8ea2c94466110c0",
              "versionType": "git"
            },
            {
              "lessThan": "1b915703964f7e636961df04c540261dc55c6c70",
              "status": "affected",
              "version": "d9b0dd54a1943f47a381a474f8ea2c94466110c0",
              "versionType": "git"
            },
            {
              "lessThan": "ea6af39f3da50c86367a71eb3cc674ade3ed244c",
              "status": "affected",
              "version": "d9b0dd54a1943f47a381a474f8ea2c94466110c0",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/rtc/rtc-pl031.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "lessThan": "5.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.33",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.16.*",
              "status": "unaffected",
              "version": "5.16.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.33",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16.19",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.2",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: pl031: fix rtc features null pointer dereference\n\nWhen there is no interrupt line, rtc alarm feature is disabled.\n\nThe clearing of the alarm feature bit was being done prior to allocations\nof ldata-\u003ertc device, resulting in a null pointer dereference.\n\nClear RTC_FEATURE_ALARM after the rtc device is allocated."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T08:33:55.937Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cd2722e411e8ab7e5ae41102f6925fa13dffdac5"
        },
        {
          "url": "https://git.kernel.org/stable/c/d274ce4a3dfd0b9a292667535578359b865765cb"
        },
        {
          "url": "https://git.kernel.org/stable/c/1b915703964f7e636961df04c540261dc55c6c70"
        },
        {
          "url": "https://git.kernel.org/stable/c/ea6af39f3da50c86367a71eb3cc674ade3ed244c"
        }
      ],
      "title": "rtc: pl031: fix rtc features null pointer dereference",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49273",
    "datePublished": "2025-02-26T01:56:19.110Z",
    "dateReserved": "2025-02-26T01:49:39.297Z",
    "dateUpdated": "2025-05-04T08:33:55.937Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted