GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-49021 (GCVE-0-2022-49021)

Vulnerability from cvelistv5 – Published: 2024-10-21 20:06 – Updated: 2026-05-11 18:51
VLAI
Title
net: phy: fix null-ptr-deref while probe() failed
Summary
In the Linux kernel, the following vulnerability has been resolved: net: phy: fix null-ptr-deref while probe() failed I got a null-ptr-deref report as following when doing fault injection test: BUG: kernel NULL pointer dereference, address: 0000000000000058 Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 PID: 253 Comm: 507-spi-dm9051 Tainted: G B N 6.1.0-rc3+ Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 RIP: 0010:klist_put+0x2d/0xd0 Call Trace: <TASK> klist_remove+0xf1/0x1c0 device_release_driver_internal+0x23e/0x2d0 bus_remove_device+0x1bd/0x240 device_del+0x357/0x770 phy_device_remove+0x11/0x30 mdiobus_unregister+0xa5/0x140 release_nodes+0x6a/0xa0 devres_release_all+0xf8/0x150 device_unbind_cleanup+0x19/0xd0 //probe path: phy_device_register() device_add() phy_connect phy_attach_direct() //set device driver probe() //it's failed, driver is not bound device_bind_driver() // probe failed, it's not called //remove path: phy_device_remove() device_del() device_release_driver_internal() __device_release_driver() //dev->drv is not NULL klist_remove() <- knode_driver is not added yet, cause null-ptr-deref In phy_attach_direct(), after setting the 'dev->driver', probe() fails, device_bind_driver() is not called, so the knode_driver->n_klist is not set, then it causes null-ptr-deref in __device_release_driver() while deleting device. Fix this by setting dev->driver to NULL in the error path in phy_attach_direct().
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-10-22 13:12 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: e13934563db047043ccead26412f552375cea90c , < 8aaafe0f71314f46a066382a047ba8bb3840d273 (git)
Affected: e13934563db047043ccead26412f552375cea90c , < 51d7f6b20fae8bae64ad1136f1e30d1fd5ba78f7 (git)
Affected: e13934563db047043ccead26412f552375cea90c , < 0744c7be4de564db03e24527b2e096b7e0e20972 (git)
Affected: e13934563db047043ccead26412f552375cea90c , < 3e21f85d87c836462bb52ef2078ea561260935c1 (git)
Affected: e13934563db047043ccead26412f552375cea90c , < fe6bc99c27c21348f548966118867ed26a9a372c (git)
Affected: e13934563db047043ccead26412f552375cea90c , < 7730904f50c7187dd16c76949efb56b5fb55cd57 (git)
Affected: e13934563db047043ccead26412f552375cea90c , < eaa5722549ac2604ffa56c2e946acc83226f130c (git)
Affected: e13934563db047043ccead26412f552375cea90c , < 369eb2c9f1f72adbe91e0ea8efb130f0a2ba11a6 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.14
Unaffected: 0 , < 2.6.14 (semver)
Unaffected: 4.9.335 , ≤ 4.9.* (semver)
Unaffected: 4.14.301 , ≤ 4.14.* (semver)
Unaffected: 4.19.268 , ≤ 4.19.* (semver)
Unaffected: 5.4.226 , ≤ 5.4.* (semver)
Unaffected: 5.10.158 , ≤ 5.10.* (semver)
Unaffected: 5.15.82 , ≤ 5.15.* (semver)
Unaffected: 6.0.12 , ≤ 6.0.* (semver)
Unaffected: 6.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-49021",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-22T13:12:34.199961Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-22T13:18:37.179Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/phy/phy_device.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8aaafe0f71314f46a066382a047ba8bb3840d273",
              "status": "affected",
              "version": "e13934563db047043ccead26412f552375cea90c",
              "versionType": "git"
            },
            {
              "lessThan": "51d7f6b20fae8bae64ad1136f1e30d1fd5ba78f7",
              "status": "affected",
              "version": "e13934563db047043ccead26412f552375cea90c",
              "versionType": "git"
            },
            {
              "lessThan": "0744c7be4de564db03e24527b2e096b7e0e20972",
              "status": "affected",
              "version": "e13934563db047043ccead26412f552375cea90c",
              "versionType": "git"
            },
            {
              "lessThan": "3e21f85d87c836462bb52ef2078ea561260935c1",
              "status": "affected",
              "version": "e13934563db047043ccead26412f552375cea90c",
              "versionType": "git"
            },
            {
              "lessThan": "fe6bc99c27c21348f548966118867ed26a9a372c",
              "status": "affected",
              "version": "e13934563db047043ccead26412f552375cea90c",
              "versionType": "git"
            },
            {
              "lessThan": "7730904f50c7187dd16c76949efb56b5fb55cd57",
              "status": "affected",
              "version": "e13934563db047043ccead26412f552375cea90c",
              "versionType": "git"
            },
            {
              "lessThan": "eaa5722549ac2604ffa56c2e946acc83226f130c",
              "status": "affected",
              "version": "e13934563db047043ccead26412f552375cea90c",
              "versionType": "git"
            },
            {
              "lessThan": "369eb2c9f1f72adbe91e0ea8efb130f0a2ba11a6",
              "status": "affected",
              "version": "e13934563db047043ccead26412f552375cea90c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/phy/phy_device.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.14"
            },
            {
              "lessThan": "2.6.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.335",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.301",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.268",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.226",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.158",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.82",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.335",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.301",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.268",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.226",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.158",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.82",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.12",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: fix null-ptr-deref while probe() failed\n\nI got a null-ptr-deref report as following when doing fault injection test:\n\nBUG: kernel NULL pointer dereference, address: 0000000000000058\nOops: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 1 PID: 253 Comm: 507-spi-dm9051 Tainted: G    B            N 6.1.0-rc3+\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014\nRIP: 0010:klist_put+0x2d/0xd0\nCall Trace:\n \u003cTASK\u003e\n klist_remove+0xf1/0x1c0\n device_release_driver_internal+0x23e/0x2d0\n bus_remove_device+0x1bd/0x240\n device_del+0x357/0x770\n phy_device_remove+0x11/0x30\n mdiobus_unregister+0xa5/0x140\n release_nodes+0x6a/0xa0\n devres_release_all+0xf8/0x150\n device_unbind_cleanup+0x19/0xd0\n\n//probe path:\nphy_device_register()\n  device_add()\n\nphy_connect\n  phy_attach_direct() //set device driver\n    probe() //it\u0027s failed, driver is not bound\n    device_bind_driver() // probe failed, it\u0027s not called\n\n//remove path:\nphy_device_remove()\n  device_del()\n    device_release_driver_internal()\n      __device_release_driver() //dev-\u003edrv is not NULL\n        klist_remove() \u003c- knode_driver is not added yet, cause null-ptr-deref\n\nIn phy_attach_direct(), after setting the \u0027dev-\u003edriver\u0027, probe() fails,\ndevice_bind_driver() is not called, so the knode_driver-\u003en_klist is not\nset, then it causes null-ptr-deref in __device_release_driver() while\ndeleting device. Fix this by setting dev-\u003edriver to NULL in the error\npath in phy_attach_direct()."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T18:51:40.589Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8aaafe0f71314f46a066382a047ba8bb3840d273"
        },
        {
          "url": "https://git.kernel.org/stable/c/51d7f6b20fae8bae64ad1136f1e30d1fd5ba78f7"
        },
        {
          "url": "https://git.kernel.org/stable/c/0744c7be4de564db03e24527b2e096b7e0e20972"
        },
        {
          "url": "https://git.kernel.org/stable/c/3e21f85d87c836462bb52ef2078ea561260935c1"
        },
        {
          "url": "https://git.kernel.org/stable/c/fe6bc99c27c21348f548966118867ed26a9a372c"
        },
        {
          "url": "https://git.kernel.org/stable/c/7730904f50c7187dd16c76949efb56b5fb55cd57"
        },
        {
          "url": "https://git.kernel.org/stable/c/eaa5722549ac2604ffa56c2e946acc83226f130c"
        },
        {
          "url": "https://git.kernel.org/stable/c/369eb2c9f1f72adbe91e0ea8efb130f0a2ba11a6"
        }
      ],
      "title": "net: phy: fix null-ptr-deref while probe() failed",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49021",
    "datePublished": "2024-10-21T20:06:28.608Z",
    "dateReserved": "2024-08-22T01:27:53.649Z",
    "dateUpdated": "2026-05-11T18:51:40.589Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-49021",
      "date": "2026-09-16",
      "epss": "0.00281",
      "percentile": "0.20651"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-49021\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-10-21T20:15:13.163\",\"lastModified\":\"2026-06-17T05:16:52.147\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: phy: fix null-ptr-deref while probe() failed\\n\\nI got a null-ptr-deref report as following when doing fault injection test:\\n\\nBUG: kernel NULL pointer dereference, address: 0000000000000058\\nOops: 0000 [#1] PREEMPT SMP KASAN PTI\\nCPU: 1 PID: 253 Comm: 507-spi-dm9051 Tainted: G    B            N 6.1.0-rc3+\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014\\nRIP: 0010:klist_put+0x2d/0xd0\\nCall Trace:\\n \u003cTASK\u003e\\n klist_remove+0xf1/0x1c0\\n device_release_driver_internal+0x23e/0x2d0\\n bus_remove_device+0x1bd/0x240\\n device_del+0x357/0x770\\n phy_device_remove+0x11/0x30\\n mdiobus_unregister+0xa5/0x140\\n release_nodes+0x6a/0xa0\\n devres_release_all+0xf8/0x150\\n device_unbind_cleanup+0x19/0xd0\\n\\n//probe path:\\nphy_device_register()\\n  device_add()\\n\\nphy_connect\\n  phy_attach_direct() //set device driver\\n    probe() //it\u0027s failed, driver is not bound\\n    device_bind_driver() // probe failed, it\u0027s not called\\n\\n//remove path:\\nphy_device_remove()\\n  device_del()\\n    device_release_driver_internal()\\n      __device_release_driver() //dev-\u003edrv is not NULL\\n        klist_remove() \u003c- knode_driver is not added yet, cause null-ptr-deref\\n\\nIn phy_attach_direct(), after setting the \u0027dev-\u003edriver\u0027, probe() fails,\\ndevice_bind_driver() is not called, so the knode_driver-\u003en_klist is not\\nset, then it causes null-ptr-deref in __device_release_driver() while\\ndeleting device. Fix this by setting dev-\u003edriver to NULL in the error\\npath in phy_attach_direct().\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: phy: fix null-ptr-deref while probe() failed Obtuve un informe null-ptr-deref como el siguiente al realizar la prueba de inyecci\u00f3n de fallos: ERROR: desreferencia de puntero NULL del kernel, direcci\u00f3n: 0000000000000058 Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 PID: 253 Comm: 507-spi-dm9051 Tainted: GBN 6.1.0-rc3+ Nombre del hardware: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 RIP: 0010:klist_put+0x2d/0xd0 Rastreo de llamadas:  klist_remove+0xf1/0x1c0 device_release_driver_internal+0x23e/0x2d0 bus_remove_device+0x1bd/0x240 device_del+0x357/0x770 phy_device_remove+0x11/0x30 mdiobus_unregister+0xa5/0x140 release_nodes+0x6a/0xa0 devres_release_all+0xf8/0x150 device_unbind_cleanup+0x19/0xd0 //ruta de la sonda: phy_device_register() device_add() phy_connect phy_attach_direct() //establecer el controlador del dispositivo probe() //ha fallodo, el controlador no est\u00e1 vinculado device_bind_driver() //la sonda ha fallodo, no se llama //ruta de eliminaci\u00f3n: phy_device_remove() device_del() device_release_driver_internal() __device_release_driver() //dev-\u0026gt;drv no es NULL klist_remove() \u0026lt;- knode_driver a\u00fan no se agreg\u00f3, causa null-ptr-deref En phy_attach_direct(), despu\u00e9s de configurar \u0027dev-\u0026gt;driver\u0027, probe() fallo, device_bind_driver() no se llama, por lo que knode_driver-\u0026gt;n_klist no est\u00e1 configurado, luego causa null-ptr-deref en __device_release_driver() mientras se elimina el dispositivo. Solucione esto configurando dev-\u0026gt;driver en NULL en la ruta de error en phy_attach_direct().\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/phy/phy_device.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"e13934563db047043ccead26412f552375cea90c\",\"lessThan\":\"8aaafe0f71314f46a066382a047ba8bb3840d273\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e13934563db047043ccead26412f552375cea90c\",\"lessThan\":\"51d7f6b20fae8bae64ad1136f1e30d1fd5ba78f7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e13934563db047043ccead26412f552375cea90c\",\"lessThan\":\"0744c7be4de564db03e24527b2e096b7e0e20972\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e13934563db047043ccead26412f552375cea90c\",\"lessThan\":\"3e21f85d87c836462bb52ef2078ea561260935c1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e13934563db047043ccead26412f552375cea90c\",\"lessThan\":\"fe6bc99c27c21348f548966118867ed26a9a372c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e13934563db047043ccead26412f552375cea90c\",\"lessThan\":\"7730904f50c7187dd16c76949efb56b5fb55cd57\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e13934563db047043ccead26412f552375cea90c\",\"lessThan\":\"eaa5722549ac2604ffa56c2e946acc83226f130c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e13934563db047043ccead26412f552375cea90c\",\"lessThan\":\"369eb2c9f1f72adbe91e0ea8efb130f0a2ba11a6\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/phy/phy_device.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.14\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.14\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.9.335\",\"lessThanOrEqual\":\"4.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.301\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.268\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.226\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.158\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.82\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.0.12\",\"lessThanOrEqual\":\"6.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-10-22T13:12:34.199961Z\",\"id\":\"CVE-2022-49021\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.14\",\"versionEndExcluding\":\"4.9.335\",\"matchCriteriaId\":\"DF95240D-8688-4572-B73C-F0DC8473CE27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.14.301\",\"matchCriteriaId\":\"0EE18A3A-1E78-44D6-9FDB-B267E4819993\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.268\",\"matchCriteriaId\":\"04705C94-71FA-46AB-AF73-B551892B0EBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.226\",\"matchCriteriaId\":\"274F5087-5805-4D03-8C74-8517300658F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.158\",\"matchCriteriaId\":\"D0FB1AF1-0A0B-4419-B25F-C61F17380E18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.82\",\"matchCriteriaId\":\"0DC20DB6-73C1-4465-B931-117BFB8EBB02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.0.12\",\"matchCriteriaId\":\"D6D56E90-F3EE-413D-B3E2-B518932F0C7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7E331DA-1FB0-4DEC-91AC-7DA69D461C11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"17F0B248-42CF-4AE6-A469-BB1BAE7F4705\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2422816-0C14-4B5E-A1E6-A9D776E5C49B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"35B26BE4-43A6-4A36-A7F6-5B3F572D9186\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FFFB0B3-930D-408A-91E2-BAE0C2715D80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"8535320E-A0DB-4277-800E-D0CE5BBA59E8\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0744c7be4de564db03e24527b2e096b7e0e20972\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/369eb2c9f1f72adbe91e0ea8efb130f0a2ba11a6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3e21f85d87c836462bb52ef2078ea561260935c1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/51d7f6b20fae8bae64ad1136f1e30d1fd5ba78f7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7730904f50c7187dd16c76949efb56b5fb55cd57\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8aaafe0f71314f46a066382a047ba8bb3840d273\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/eaa5722549ac2604ffa56c2e946acc83226f130c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fe6bc99c27c21348f548966118867ed26a9a372c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-13T18:17:42+00:00",
      "cve": "CVE-2022-49021",
      "id": "CVE-2022-49021",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: phy: fix null-ptr-deref while probe() failed",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49021.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-49021\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-22T13:12:34.199961Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-22T13:12:37.801Z\"}}], \"cna\": {\"title\": \"net: phy: fix null-ptr-deref while probe() failed\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"e13934563db047043ccead26412f552375cea90c\", \"lessThan\": \"8aaafe0f71314f46a066382a047ba8bb3840d273\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e13934563db047043ccead26412f552375cea90c\", \"lessThan\": \"51d7f6b20fae8bae64ad1136f1e30d1fd5ba78f7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e13934563db047043ccead26412f552375cea90c\", \"lessThan\": \"0744c7be4de564db03e24527b2e096b7e0e20972\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e13934563db047043ccead26412f552375cea90c\", \"lessThan\": \"3e21f85d87c836462bb52ef2078ea561260935c1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e13934563db047043ccead26412f552375cea90c\", \"lessThan\": \"fe6bc99c27c21348f548966118867ed26a9a372c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e13934563db047043ccead26412f552375cea90c\", \"lessThan\": \"7730904f50c7187dd16c76949efb56b5fb55cd57\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e13934563db047043ccead26412f552375cea90c\", \"lessThan\": \"eaa5722549ac2604ffa56c2e946acc83226f130c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e13934563db047043ccead26412f552375cea90c\", \"lessThan\": \"369eb2c9f1f72adbe91e0ea8efb130f0a2ba11a6\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/net/phy/phy_device.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.14\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.14\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.9.335\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.9.*\"}, {\"status\": \"unaffected\", \"version\": \"4.14.301\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.268\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.226\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.158\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.82\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.0.12\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/net/phy/phy_device.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/8aaafe0f71314f46a066382a047ba8bb3840d273\"}, {\"url\": \"https://git.kernel.org/stable/c/51d7f6b20fae8bae64ad1136f1e30d1fd5ba78f7\"}, {\"url\": \"https://git.kernel.org/stable/c/0744c7be4de564db03e24527b2e096b7e0e20972\"}, {\"url\": \"https://git.kernel.org/stable/c/3e21f85d87c836462bb52ef2078ea561260935c1\"}, {\"url\": \"https://git.kernel.org/stable/c/fe6bc99c27c21348f548966118867ed26a9a372c\"}, {\"url\": \"https://git.kernel.org/stable/c/7730904f50c7187dd16c76949efb56b5fb55cd57\"}, {\"url\": \"https://git.kernel.org/stable/c/eaa5722549ac2604ffa56c2e946acc83226f130c\"}, {\"url\": \"https://git.kernel.org/stable/c/369eb2c9f1f72adbe91e0ea8efb130f0a2ba11a6\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: phy: fix null-ptr-deref while probe() failed\\n\\nI got a null-ptr-deref report as following when doing fault injection test:\\n\\nBUG: kernel NULL pointer dereference, address: 0000000000000058\\nOops: 0000 [#1] PREEMPT SMP KASAN PTI\\nCPU: 1 PID: 253 Comm: 507-spi-dm9051 Tainted: G    B            N 6.1.0-rc3+\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014\\nRIP: 0010:klist_put+0x2d/0xd0\\nCall Trace:\\n \u003cTASK\u003e\\n klist_remove+0xf1/0x1c0\\n device_release_driver_internal+0x23e/0x2d0\\n bus_remove_device+0x1bd/0x240\\n device_del+0x357/0x770\\n phy_device_remove+0x11/0x30\\n mdiobus_unregister+0xa5/0x140\\n release_nodes+0x6a/0xa0\\n devres_release_all+0xf8/0x150\\n device_unbind_cleanup+0x19/0xd0\\n\\n//probe path:\\nphy_device_register()\\n  device_add()\\n\\nphy_connect\\n  phy_attach_direct() //set device driver\\n    probe() //it\u0027s failed, driver is not bound\\n    device_bind_driver() // probe failed, it\u0027s not called\\n\\n//remove path:\\nphy_device_remove()\\n  device_del()\\n    device_release_driver_internal()\\n      __device_release_driver() //dev-\u003edrv is not NULL\\n        klist_remove() \u003c- knode_driver is not added yet, cause null-ptr-deref\\n\\nIn phy_attach_direct(), after setting the \u0027dev-\u003edriver\u0027, probe() fails,\\ndevice_bind_driver() is not called, so the knode_driver-\u003en_klist is not\\nset, then it causes null-ptr-deref in __device_release_driver() while\\ndeleting device. Fix this by setting dev-\u003edriver to NULL in the error\\npath in phy_attach_direct().\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.9.335\", \"versionStartIncluding\": \"2.6.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.301\", \"versionStartIncluding\": \"2.6.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.268\", \"versionStartIncluding\": \"2.6.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.226\", \"versionStartIncluding\": \"2.6.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.158\", \"versionStartIncluding\": \"2.6.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.82\", \"versionStartIncluding\": \"2.6.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.12\", \"versionStartIncluding\": \"2.6.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1\", \"versionStartIncluding\": \"2.6.14\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T18:51:40.589Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-49021\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T18:51:40.589Z\", \"dateReserved\": \"2024-08-22T01:27:53.649Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-10-21T20:06:28.608Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.