In the Linux kernel, the following vulnerability has been resolved: rtc: mt6397: check return value after calling platform_get_resource() It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/3867f0bbb94773d41e789257abec0d14f37da217 cve-icon cve-icon
https://git.kernel.org/stable/c/58a729c55ce3a432eb827fdaa24c7909cd3b0a6b cve-icon cve-icon
https://git.kernel.org/stable/c/6ecd4d5c28408df36a1a6f0b1973f633c949ac1f cve-icon cve-icon
https://git.kernel.org/stable/c/79fa3f5758d8712df0678df98161f948fc4370e5 cve-icon cve-icon
https://git.kernel.org/stable/c/82bfea344e8f7e9a0e0b1bf9af27552baa756620 cve-icon cve-icon
https://git.kernel.org/stable/c/865051de2d9eaa50630e055b73921ceaf3c4a7fc cve-icon cve-icon
https://git.kernel.org/stable/c/d3b43eb505bffb8e4cdf6800c15660c001553fe6 cve-icon cve-icon
https://git.kernel.org/stable/c/d77f28c1bc9d3043a52069fe42e4a26fbf961ebd cve-icon cve-icon
https://git.kernel.org/stable/c/da38e86d6cf6dd3bc65c602d998f357145aa1a0b cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022646-CVE-2022-49375-c238@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49375 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49375 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 21 Apr 2025 02:45:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Low

 threat_severity

Moderate

Mon, 14 Apr 2025 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Fri, 28 Feb 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Wed, 26 Feb 2025 02:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: rtc: mt6397: check return value after calling platform_get_resource() It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.
Title rtc: mt6397: check return value after calling platform_get_resource()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T02:11:15.627Z

Updated: 2025-10-01T19:46:52.396Z

Reserved: 2025-02-26T02:08:31.557Z

Link: CVE-2022-49375

cve-icon Vulnrichment

Updated: 2025-10-01T16:45:54.283Z

cve-icon NVD

Status : Modified

Published: 2025-02-26T07:01:14.160

Modified: 2025-10-01T20:16:14.740

Link: CVE-2022-49375

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49375 - Bugzilla