CVE-2022-48703

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR

In some case, the GDDV returns a package with a buffer which has zero length. It causes that kmemdup() returns ZERO_SIZE_PTR (0x10).

Then the data_vault_read() got NULL point dereference problem when accessing the 0x10 value in data_vault.

[ 71.024560] BUG: kernel NULL pointer dereference, address: 0000000000000010

This patch uses ZERO_OR_NULL_PTR() for checking ZERO_SIZE_PTR or NULL value in data_vault.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 0ba13c763aacb27ab32bde5d559bf40e88465921, < 722588f17fd3d3a127e50718ec2caf22bd7e9daa; >= 0ba13c763aacb27ab32bde5d559bf40e88465921, < 39d5137085a6c37ace4680ee4d24020a4a03e7dc; >= 0ba13c763aacb27ab32bde5d559bf40e88465921, < dae42083b045a4ddf71c57cf350cb2412b5915c2; >= 0ba13c763aacb27ab32bde5d559bf40e88465921, < 7931e28098a4c1a2a6802510b0cbe57546d2049d
LinuxLinux5.8

References

Timeline

Published
May 3, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-487045.5In the Linux kernel, the following vulnerability has been resolved: drm/radeon: add a force flush to delay work when radeon Although radeoCVE-2022-487055.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix crash in chip reset fail In case of drv own fCVE-2022-487065.5In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Do proper cleanup if IFCVF init fails ifcvf_mgmt_dev leakCVE-2022-487075.5In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix null pointer dereference for resetting decoder Not allCVE-2022-487085.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference Added checking of poinCVE-2022-487095.5In the Linux kernel, the following vulnerability has been resolved: ice: switch: fix potential memleak in ice_add_adv_recipe() When ice_adCVE-2022-48717.2A vulnerability classified as problematic was found in ummmmm nflpick-em.com up to 2.2.x. This vulnerability affects the function _Load_UserCVE-2022-487105.5In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix a possible null pointer dereference In radeon_fp_nativCVE-2022-487115.5In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The functioCVE-2022-487127.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4_fc_record_modified_inode() Current coCVE-2022-487135.5In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode AdCVE-2022-487147.1In the Linux kernel, the following vulnerability has been resolved: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf After commit 2fd3fb0be
CVE-2022-48703: Medium severity, CVSS 5.5 | Vulnix