What’s Vulnerable › Vulnerabilities

CVE-2022-49302: USB: host: isp116x: check return value after calling platform_get_resource()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: USB: host: isp116x: check return value after calling platform_get_resource() It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.

Affected products

• Linux kernel: before 4.9.318; from 4.10 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.122; from 5.11 before 5.15.47 — fixed in 4.14.283, 4.19.247, 4.9.318, 5.10.122, 5.15.47, 5.17.15

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 4.9.318, 5.10.122. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/134a3408c2d3f7e23eb0e4556e0a2d9f36c2614e
• https://git.kernel.org/stable/c/3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9a
• https://git.kernel.org/stable/c/3825db88d8c704e7992b685618a03f82bffcf2ef
• https://git.kernel.org/stable/c/7bffda1560a6f255fdf504e059fbbdb5d46b9e44
• https://git.kernel.org/stable/c/804de302ada3544699c5f48c5314b249af76faa3
• https://git.kernel.org/stable/c/82a101f14943f479fd190b1e5b40d91c77e2ac1b
• https://git.kernel.org/stable/c/aca0cab0e9ed33b6371aafb519a6c38f2850ffc3
• https://git.kernel.org/stable/c/c91a74b1f0f2d2d7e728742ae55e3ffe9ba7853d
• https://git.kernel.org/stable/c/ee105039d3653444de4d3ede642383c92855dc1e

Get alerted when CVE-2022-49302 or the next vulnerability affects your stack