What’s Vulnerable › Vulnerabilities

CVE-2022-49046: i2c: dev: check return value when calling dev_set_name()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: dev: check return value when calling dev_set_name() If dev_set_name() fails, the dev_name() is null, check the return value of dev_set_name() to avoid the null-ptr-deref.

Affected products

• Linux kernel: from 4.4.225 before 4.5; from 4.9.225 before 4.10; from 4.14.182 before 4.15; from 4.19.125 before 4.20; from 5.4.43 before 5.5; from 5.6.15 before 5.15.35 — fixed in 4.10, 4.15, 4.20, 4.5, 5.15.35, 5.17.4

How to fix

Upgrade to a fixed version: Linux kernel 4.10, 4.15, 4.20, 4.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2e539b17d4cbe5fb8b5152dd9a6e4a8828f97db2
• https://git.kernel.org/stable/c/2f345bb14ad4744950499ff222e2899209297afa
• https://git.kernel.org/stable/c/993eb48fa199b5f476df8204e652eff63dd19361
• https://git.kernel.org/stable/c/c74d77a2d07744147d734138acd6ce9dba715e5d
• https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

Get alerted when CVE-2022-49046 or the next vulnerability affects your stack