What’s Vulnerable › Vulnerabilities

CVE-2022-49060: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() dev_name() was called with dev.parent as argument but without to NULL-check it before. Solve this by checking the pointer before the call to dev_name().

Affected products

• Linux kernel: from 5.1 before 5.4.190; from 5.5 before 5.10.112; from 5.11 before 5.15.35; from 5.16 before 5.17.4; 5.18-rc1, 5.18-rc2 — fixed in 5.10.112, 5.15.35, 5.17.4, 5.4.190

How to fix

Upgrade to a fixed version: Linux kernel 5.10.112, 5.15.35, 5.17.4, 5.4.190. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/22025513ced3d599ee8b24169141c95cf2467a4a
• https://git.kernel.org/stable/c/35b91e49bc80ca944a8679c3b139ddaf2f8eea0f
• https://git.kernel.org/stable/c/3a523807f01455fe9a0c1a433f27cd4411ee400f
• https://git.kernel.org/stable/c/a05f5e26cb8bb4d07e0595545fcad1bb406f0085
• https://git.kernel.org/stable/c/d22f4f977236f97e01255a80bca2ea93a8094fc8

Get alerted when CVE-2022-49060 or the next vulnerability affects your stack