{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2022-48972",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2022-48972",
    "idYear": 2022,
    "status": "PUBLISHED",
    "publishedAt": "2024-10-21T20:05:53.061Z",
    "updatedAt": "2026-05-11T18:50:43.311Z",
    "importedAt": "2026-10-24T01:56:45.230Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()\n\nKernel fault injection test reports null-ptr-deref as follows:\n\nBUG: kernel NULL pointer dereference, address: 0000000000000008\nRIP: 0010:cfg802154_netdev_notifier_call+0x120/0x310 include/linux/list.h:114\nCall Trace:\n <TASK>\n raw_notifier_call_chain+0x6d/0xa0 kernel/notifier.c:87\n call_netdevice_notifiers_info+0x6e/0xc0 net/core/dev.c:1944\n unregister_netdevice_many_notify+0x60d/0xcb0 net/core/dev.c:1982\n unregister_netdevice_queue+0x154/0x1a0 net/core/dev.c:10879\n register_netdevice+0x9a8/0xb90 net/core/dev.c:10083\n ieee802154_if_add+0x6ed/0x7e0 net/mac802154/iface.c:659\n ieee802154_register_hw+0x29c/0x330 net/mac802154/main.c:229\n mcr20a_probe+0xaaa/0xcb1 drivers/net/ieee802154/mcr20a.c:1316\n\nieee802154_if_add() allocates wpan_dev as netdev's private data, but not\ninit the list in struct wpan_dev. cfg802154_netdev_notifier_call() manage\nthe list when device register/unregister, and may lead to null-ptr-deref.\n\nUse INIT_LIST_HEAD() on it to initialize it correctly.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "fcf39e6e88e9492f6688ec8ba4e1be622b904232",
              "status": "affected",
              "versionType": "git",
              "lessThan": "7410f4d1221bb182510b7778ab6eefa8b9b7102d"
            },
            {
              "version": "fcf39e6e88e9492f6688ec8ba4e1be622b904232",
              "status": "affected",
              "versionType": "git",
              "lessThan": "9980a3ea20de40c83817877106c909cb032692d2"
            },
            {
              "version": "fcf39e6e88e9492f6688ec8ba4e1be622b904232",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f00c84fb1635c27ba24ec5df65d5bd7d7dc00008"
            },
            {
              "version": "fcf39e6e88e9492f6688ec8ba4e1be622b904232",
              "status": "affected",
              "versionType": "git",
              "lessThan": "1831d4540406708e48239cf38fd9c3b7ea98e08f"
            },
            {
              "version": "fcf39e6e88e9492f6688ec8ba4e1be622b904232",
              "status": "affected",
              "versionType": "git",
              "lessThan": "42c319635c0cf7eb36eccac6cda76532f47b61a3"
            },
            {
              "version": "fcf39e6e88e9492f6688ec8ba4e1be622b904232",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a110287ef4a423980309490df632e1c1e73b3dc9"
            },
            {
              "version": "fcf39e6e88e9492f6688ec8ba4e1be622b904232",
              "status": "affected",
              "versionType": "git",
              "lessThan": "623918f40fa68e3bb21312a3fafb90f491bf5358"
            },
            {
              "version": "fcf39e6e88e9492f6688ec8ba4e1be622b904232",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b3d72d3135d2ef68296c1ee174436efd65386f04"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "3.19",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "3.19"
            },
            {
              "version": "4.9.336",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.9.*"
            },
            {
              "version": "4.14.302",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.14.*"
            },
            {
              "version": "4.19.269",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "version": "5.4.227",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.159",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.83",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.0.13",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.0.*"
            },
            {
              "version": "6.1",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}