In the Linux kernel, the following vulnerability has been resolved:
xhci: Fix null pointer dereference in remove if xHC has only one roothub
The remove path in xhci platform driver tries to remove and put both main
and shared hcds even if only a main hcd exists (one roothub)
This causes a null pointer dereference in reboot for those controllers.
Check that the shared_hcd exists before trying to remove it.
References
Configurations
Configuration 1 (hide)
|
History
14 Nov 2025, 18:08
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| Summary |
|
|
| First Time |
Linux
Linux linux Kernel |
|
| References | () https://git.kernel.org/stable/c/4a593a62a9e3a25ab4bc37f612e4edec144f7f43 - Patch | |
| References | () https://git.kernel.org/stable/c/7081b2f34ff291ada012bd6abacaf7d51c4cf73f - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
18 Jun 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-18 11:15
Updated : 2025-11-14 18:08
NVD link : CVE-2022-49962
Mitre link : CVE-2022-49962
CVE.ORG link : CVE-2022-49962
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference
