CVE-2022-49308
CVE-2022-49308 updated by NVD
Summary
In the Linux kernel, the following vulnerability has been resolved: extcon: Modify extcon device to be created after driver data is set Currently, someone can invoke the sysfs such as state_show() intermittently before dev_set_drvdata() is done. And it can be a cause of kernel Oops because of edev is Null at that time. So modified the driver registration to after setting drviver data. - Oops's backtrace. Backtrace: [ ] (state_show) from [ ] (dev_attr_show) [ ] (dev_attr_show) from [ ] (sysfs_kf_seq_show) [ ] (sysfs_kf_seq_show) from [ ] (kernfs_seq_show) [ ] (kernfs_seq_show) from [ ] (seq_read) [ ] (seq_read) from [ ] (kernfs_fop_read) [ ] (kernfs_fop_read) from [ ] (__vfs_read) [ ] (__vfs_read) from [ ] (vfs_read) [ ] (vfs_read) from [ ] (ksys_read) [ ] (ksys_read) from [ ] (sys_read) [ ] (sys_read) from [ ] (__sys_trace_return)
References
Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.
CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.