NULL Pointer Dereference in Linux Kernel's ata_host_alloc_pinfo Function

CVE-2022-49731

Summary

A vulnerability exists in the Linux kernel related to the ata_host_alloc_pinfo function, where a NULL pointer dereference may occur if the 'ppi' parameter erroneously points to an array starting with a NULL. This situation could lead to a kernel oops and potential system instability. The issue has been addressed by ensuring that the 'pi' local variable is initialized to a non-NULL reference, thereby preventing the malfunction and enhancing the robustness of the kernel. This vulnerability was identified by the Linux Verification Center using static analysis tools.

References