CVE-2022-49802
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
ftrace: Fix null pointer dereference in ftrace_add_mod()
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix null pointer dereference in ftrace_add_mod() The @ftrace_mod is allocated by kzalloc(), so both the members {prev,next} of @ftrace_mode->list are NULL, it's not a valid state to call list_del(). If kstrdup() for @ftrace_mod->{func|module} fails, it goes to @out_free tag and calls free_ftrace_mod() to destroy @ftrace_mod, then list_del() will write prev->next and next->prev, where null pointer dereference happens. BUG: kernel NULL pointer dereference, address: 0000000000000008 Oops: 0002 [#1] PREEMPT SMP NOPTI Call Trace: <TASK> ftrace_mod_callback+0x20d/0x220 ? do_filp_open+0xd9/0x140 ftrace_process_regex.isra.51+0xbf/0x130 ftrace_regex_write.isra.52.part.53+0x6e/0x90 vfs_write+0xee/0x3a0 ? __audit_filter_op+0xb1/0x100 ? auditd_test_task+0x38/0x50 ksys_write+0xa5/0xe0 do_syscall_64+0x3a/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd Kernel panic - not syncing: Fatal exception So call INIT_LIST_HEAD() to initialize the list member to fix this issue.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 673feb9d76ab3eddde7acfd94b206e321cfc90b9 | affected | git | 665b4c6648bf2b91f69b33817f4321cf4c3cafe9 | Unavailable | None listed |
| 673feb9d76ab3eddde7acfd94b206e321cfc90b9 | affected | git | b5bfc61f541d3f092b13dedcfe000d86eb8e133c | Unavailable | None listed |
| 673feb9d76ab3eddde7acfd94b206e321cfc90b9 | affected | git | f715f31559b82e3f75ce047fa476de63d8107584 | Unavailable | None listed |
| 673feb9d76ab3eddde7acfd94b206e321cfc90b9 | affected | git | 6a14828caddad0d989495a72af678adf60992704 | Unavailable | None listed |
| 673feb9d76ab3eddde7acfd94b206e321cfc90b9 | affected | git | 1bea037a1abb23a6729bef36a2265a4565f5ea77 | Unavailable | None listed |
| 673feb9d76ab3eddde7acfd94b206e321cfc90b9 | affected | git | 6e50eb4b1807017f6c2d5089064256ce2de8aef1 | Unavailable | None listed |
| 673feb9d76ab3eddde7acfd94b206e321cfc90b9 | affected | git | 19ba6c8af9382c4c05dc6a0a79af3013b9a35cd0 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.13 | Unavailable | None listed |
| 4.14.300 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.267 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.225 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.156 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.80 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.0.10 | unaffected | semver | Unavailable | 6.0.* | None listed |
| 6.1 | unaffected | original_commit_for_fix | Unavailable | * | None listed |