What’s Vulnerable › Vulnerabilities

CVE-2022-49184: net: sparx5: switchdev: fix possible NULL pointer dereference

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: switchdev: fix possible NULL pointer dereference As the possible failure of the allocation, devm_kzalloc() may return NULL pointer. Therefore, it should be better to check the 'db' in order to prevent the dereference of NULL pointer.

Affected products

• Linux kernel: from 5.15 before 5.15.33; from 5.16 before 5.16.19; from 5.17 before 5.17.2 — fixed in 5.15.33, 5.16.19, 5.17.2

How to fix

Upgrade to a fixed version: Linux kernel 5.15.33, 5.16.19, 5.17.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0906f3a3df07835e37077d8971aac65347f2ed57
• https://git.kernel.org/stable/c/b375ea083fa649092cd016ac1f89a2d1fd8f8e8b
• https://git.kernel.org/stable/c/c346791877e6ce923bb21e34b30c6f99326aa5a8
• https://git.kernel.org/stable/c/e7e1fff76c4c57688dc7d53a3b6212182d5628d0

Get alerted when CVE-2022-49184 or the next vulnerability affects your stack