CVE-2022-50276

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2025-09-15 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in power_supply_get_battery_info when kmalloc() fail to allocate memory in kasprintf(), propname will be NULL, strcmp() called by of_get_property() will cause null pointer dereference. So return ENOMEM if kasprintf() return NULL pointer.

Weakness Classification (1)

CWE-476

Affected Software (8)

Vendor	Product	Version
Linux	Linux	3afb50d7125bcdbf71df843134e96ceffc78c8b8 < 8ea68b4e3fa9392ef9dae303abc8735a033c280f
Linux	Linux	3afb50d7125bcdbf71df843134e96ceffc78c8b8 < 5beadb55f4e36fafe5d6df5dcd5f85d803f3f134
Linux	Linux	3afb50d7125bcdbf71df843134e96ceffc78c8b8 < d21534ab4fd7883e1c8037a76671d4e8b6ea14cb
Linux	Linux	3afb50d7125bcdbf71df843134e96ceffc78c8b8 < 279af90e65cbdb3e5c4519b0043324d7876bc5ec
Linux	Linux	3afb50d7125bcdbf71df843134e96ceffc78c8b8 < b8131efb89d9f837c9244f900f0fc2699fd1181d
Linux	Linux	3afb50d7125bcdbf71df843134e96ceffc78c8b8 < 104bb8a663451404a26331263ce5b96c34504049
Linux	Linux	5.0
linux	linux_kernel	5.0 – 5.4.229