What’s Vulnerable › Vulnerabilities

CVE-2022-49375: rtc: mt6397: check return value after calling platform_get_resource()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: rtc: mt6397: check return value after calling platform_get_resource() It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.

Affected products

• Linux kernel: from 4.2 before 4.9.318; from 4.10 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.122; from 5.11 before 5.15.47 — fixed in 4.14.283, 4.19.247, 4.9.318, 5.10.122, 5.15.47, 5.17.15

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 4.9.318, 5.10.122. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3867f0bbb94773d41e789257abec0d14f37da217
• https://git.kernel.org/stable/c/58a729c55ce3a432eb827fdaa24c7909cd3b0a6b
• https://git.kernel.org/stable/c/6ecd4d5c28408df36a1a6f0b1973f633c949ac1f
• https://git.kernel.org/stable/c/79fa3f5758d8712df0678df98161f948fc4370e5
• https://git.kernel.org/stable/c/82bfea344e8f7e9a0e0b1bf9af27552baa756620
• https://git.kernel.org/stable/c/865051de2d9eaa50630e055b73921ceaf3c4a7fc
• https://git.kernel.org/stable/c/d3b43eb505bffb8e4cdf6800c15660c001553fe6
• https://git.kernel.org/stable/c/d77f28c1bc9d3043a52069fe42e4a26fbf961ebd
• https://git.kernel.org/stable/c/da38e86d6cf6dd3bc65c602d998f357145aa1a0b

Get alerted when CVE-2022-49375 or the next vulnerability affects your stack