{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"aaf552c5d53abe4659176e099575fe870d2e4768","status":"affected","version":"57291ce295c0aca738dd284c4a9c591c09ebee71","versionType":"git"},{"lessThan":"b4d9f55cd38435358bc16d580612bc0d798d7b4c","status":"affected","version":"57291ce295c0aca738dd284c4a9c591c09ebee71","versionType":"git"},{"lessThan":"a988dcd3dd9e691c5ccc3324b209688f3b5453e9","status":"affected","version":"57291ce295c0aca738dd284c4a9c591c09ebee71","versionType":"git"},{"lessThan":"040f726fecd88121f3b95e70369785ad452dddf9","status":"affected","version":"57291ce295c0aca738dd284c4a9c591c09ebee71","versionType":"git"},{"lessThan":"777430aa4ddccaa5accec6db90ffc1d47f00d471","status":"affected","version":"57291ce295c0aca738dd284c4a9c591c09ebee71","versionType":"git"},{"lessThan":"97e5b508e96176f1a73888ed89df396d7041bfcb","status":"affected","version":"57291ce295c0aca738dd284c4a9c591c09ebee71","versionType":"git"},{"lessThan":"5834a3a98cd266ad35a229923c0adbd0addc8d68","status":"affected","version":"57291ce295c0aca738dd284c4a9c591c09ebee71","versionType":"git"},{"lessThan":"91d5c5060ee24fe8da88cd585bb43b843d2f0dce","status":"affected","version":"57291ce295c0aca738dd284c4a9c591c09ebee71","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"3.5"},{"lessThan":"3.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.9.*","status":"unaffected","version":"4.9.334","versionType":"semver"},{"lessThanOrEqual":"4.14.*","status":"unaffected","version":"4.14.300","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.267","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.225","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.156","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.80","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49832","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map\n\nHere is the BUG report by KASAN about null pointer dereference:\n\nBUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50\nRead of size 1 at addr 0000000000000000 by task python3/2640\nCall Trace:\n strcmp\n __of_find_property\n of_find_property\n pinctrl_dt_to_map\n\nkasprintf() would return NULL pointer when kmalloc() fail to allocate.\nSo directly return ENOMEM, if kasprintf() return NULL pointer.","epss":{"date":"2026-11-05","percentile":0.12339,"score":0.00218},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908808996,"publishedAt":1746108590435,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/aaf552c5d53abe4659176e099575fe870d2e4768"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b4d9f55cd38435358bc16d580612bc0d798d7b4c"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a988dcd3dd9e691c5ccc3324b209688f3b5453e9"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/040f726fecd88121f3b95e70369785ad452dddf9"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/777430aa4ddccaa5accec6db90ffc1d47f00d471"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/97e5b508e96176f1a73888ed89df396d7041bfcb"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/5834a3a98cd266ad35a229923c0adbd0addc8d68"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/91d5c5060ee24fe8da88cd585bb43b843d2f0dce"}],"remediation":[],"revision":"aa208bd0780cf184bce604defd0f985b0ebd4667166ca6dd92b45e9429e99804","sources":[{"modifiedAt":1793908808996,"name":"CNA: Linux","retrievedAt":1793909462657,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49832"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909486105,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49832"}],"ssvc":{"assessedAt":1793908221700,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map","updatedAt":1793909486105}