CVE-2022-49802

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the ftrace module. The @ftrace mod is allocated by kzalloc(), resulting in both members {prev,next} of @ftrace mode->list being NULL. This is not a valid state to call list del(). If kstrdup() for @ftrace mod->{func|module} fails, it leads to a null pointer dereference when list del() is called. The issue can cause a kernel panic with a fatal exception.

Recommendations To resolve this issue, call INIT LIST HEAD() to initialize the list member. This will prevent the null pointer dereference and fix the problem.

Note: The exact affected versions are not specified, and there is no information about a newer version that contains a fix for this vulnerability.