{"id":"CVE-2022-49618","title":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()\n\npdesc could be null but still dereference pdesc->name and it will lead to\na null pointer acc…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()\n\npdesc could be null but still dereference pdesc->name and it will lead to\na null pointer acc…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476","CWE-476"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel < 5.10.132","linux_kernel >= 5.11, < 5.15.56","linux_kernel >= 5.16, < 5.18.13","linux_kernel = 5.19"],"patched":["linux_kernel 5.18.13"],"published":"2025-02-26","updated":"2026-08-15","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-49618","references":[{"url":"https://git.kernel.org/stable/c/3cb392b64304a05bf647e2e44efacd9a1f3c3c6a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/84a85d3fef2e75b1fe9fc2af6f5267122555a1ed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e162a24f1dd06c0dcae71f2565c9f3da2827b98e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ef1e38532f4b2f0f3b460e938a2e7076c3bed5ee","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd"],"epss":0.00257,"epssPercentile":0.17687,"ingestedAt":"2026-08-15T13:26:44.585Z","slug":"CVE-2022-49618","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()\n\npdesc could be null but still dereference pdesc->name and it will lead to\na null pointer access. So we move a null check before dereference.\n\n## Affected\n\n- `linux_kernel < 5.10.132`\n- `linux_kernel >= 5.11, < 5.15.56`\n- `linux_kernel >= 5.16, < 5.18.13`\n- `linux_kernel = 5.19`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 5.18.13`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}