NULL Pointer Dereference in Linux Kernel's ata_host_alloc_pinfo Function

CVE-2022-49731

What is CVE-2022-49731?

A vulnerability exists in the Linux kernel related to the ata_host_alloc_pinfo function, where a NULL pointer dereference may occur if the 'ppi' parameter erroneously points to an array starting with a NULL. This situation could lead to a kernel oops and potential system instability. The issue has been addressed by ensuring that the 'pi' local variable is initialized to a non-NULL reference, thereby preventing the malfunction and enhancing the robustness of the kernel. This vulnerability was identified by the Linux Verification Center using static analysis tools.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References