CVE-2022-48777

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: parsers: qcom: Fix kernel panic on skipped partition

In the event of a skipped partition (case when the entry name is empty) the kernel panics in the cleanup function as the name entry is NULL. Rework the parser logic by first checking the real partition number and then allocate the space and set the data for the valid partitions.

The logic was also fundamentally wrong as with a skipped partition, the parts number returned was incorrect by not decreasing it for the skipped partitions.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 803eb124e1a64e42888542c3444bfe6dac412c7f, < eb03cb6e03ffd9173e18e5fe87e4e3ce83820453; >= 803eb124e1a64e42888542c3444bfe6dac412c7f, < a2995fe23095ceda2dc382fbe057f5e164595548; >= 803eb124e1a64e42888542c3444bfe6dac412c7f, < 65d003cca335cabc0160d3cd7daa689eaa9dd3cd
LinuxLinux5.12

References

Timeline

Published
Jul 16, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-487787.8In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpmi_nfc_CVE-2022-487797.8In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlanCVE-2022-48785.3A vulnerability classified as critical has been found in JATOS. Affected is the function ZipUtil of the file modules/common/app/utils/commonCVE-2022-487805.5In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions ThCVE-2022-487815.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - get rid of alg_memory_allocated alg_memory_allocated CVE-2022-487827.8In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem roCVE-2022-487837.8In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_pCVE-2022-487844.7In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous CVE-2022-487855.5In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() Some time ago 8CVE-2022-487865.5In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted byCVE-2022-487877.8In the Linux kernel, the following vulnerability has been resolved: iwlwifi: fix use-after-free If no firmware was present at all (or, preCVE-2022-487887.8In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free in transport error_recovery work
CVE-2022-48777: Medium severity, CVSS 5.5 | Vulnix