NVD

CVE-2022-49299 Detail

Rejected

This CVE has been marked Rejected in the CVE List. These CVEs are stored in the NVD, but do not show up in search results by default.

Current Description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

View Analysis Description

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)

Weakness Enumeration

CWE-ID	CWE Name	Source

Change History

4 change records found show changes

CVE Modified by kernel.org 6/19/2025 10:15:34 AM

Action	Type	Old Value	New Value
Changed	Description	In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: gadget: don't reset gadget's driver->bus UDC driver should not touch gadget's driver internals, especially it should not reset driver->bus. This wasn't harmful so far, but since commit fc274c1e9973 ("USB: gadget: Add a new bus for gadgets") gadget subsystem got it's own bus and messing with ->bus triggers the following NULL pointer dereference: dwc2 12480000.hsotg: bound driver g_ether 8<--- cut here --- Unable to handle kernel NULL pointer dereference at virtual address 00000000 [00000000] *pgd=00000000 Internal error: Oops: 5 [#1] SMP ARM Modules linked in: ... CPU: 0 PID: 620 Comm: modprobe Not tainted 5.18.0-rc5-next-20220504 #11862 Hardware name: Samsung Exynos (Flattened Device Tree) PC is at module_add_driver+0x44/0xe8 LR is at sysfs_do_create_link_sd+0x84/0xe0 ... Process modprobe (pid: 620, stack limit = 0x(ptrval)) ... module_add_driver from bus_add_driver+0xf4/0x1e4 bus_add_driver from driver_register+0x78/0x10c driver_register from usb_gadget_register_driver_owner+0x40/0xb4 usb_gadget_register_driver_owner from do_one_initcall+0x44/0x1e0 do_one_initcall from do_init_module+0x44/0x1c8 do_init_module from load_module+0x19b8/0x1b9c load_module from sys_finit_module+0xdc/0xfc sys_finit_module from ret_fast_syscall+0x0/0x54 Exception stack(0xf1771fa8 to 0xf1771ff0) ... dwc2 12480000.hsotg: new device is high-speed ---[ end trace 0000000000000000 ]--- Fix this by removing driver->bus entry reset.	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Removed	CVSS V3.1	NIST: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Removed	CWE	NIST: CWE-476
Removed	CPE Configuration	OR cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.20 up to (excluding) 5.4.198 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.10 up to (excluding) 4.14.283 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.15 up to (excluding) 4.19.247 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.18 up to (excluding) 5.18.4 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.16 up to (excluding) 5.17.15 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.11 up to (excluding) 5.15.47 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.5 up to (excluding) 5.10.122 cpe:2.3:o:linux:linux_kernel::::::::* versions up to (excluding) 4.9.318
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/172cfc167c8ee6238f24f9c16efd598602af643c
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/3120aac6d0ecd9accf56894aeac0e265f74d3d5a
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/5127c0f365265bb69cd776ad6e4b872c309f3fa8
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/547ebdc200b862dff761ff4890f66d8217c33316
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/5b0c0298f7c3b57417f1729ec4071f76864b72dd
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/bee8f9808a7e82addfc73a0973b16a8bb684205b
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/d2159feb9d28ce496d77df98313ab454646372ac
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/d232ca0bbc7d03144bad0ffd1792c3352bfd03fa
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/efb15ff4a77fe053c941281775fefa91c87770e0
Removed	Reference Type	kernel.org: https://git.kernel.org/stable/c/172cfc167c8ee6238f24f9c16efd598602af643c Types: Patch
Removed	Reference Type	kernel.org: https://git.kernel.org/stable/c/3120aac6d0ecd9accf56894aeac0e265f74d3d5a Types: Patch
Removed	Reference Type	kernel.org: https://git.kernel.org/stable/c/5127c0f365265bb69cd776ad6e4b872c309f3fa8 Types: Patch
Removed	Reference Type	kernel.org: https://git.kernel.org/stable/c/547ebdc200b862dff761ff4890f66d8217c33316 Types: Patch
Removed	Reference Type	kernel.org: https://git.kernel.org/stable/c/5b0c0298f7c3b57417f1729ec4071f76864b72dd Types: Patch
Removed	Reference Type	kernel.org: https://git.kernel.org/stable/c/bee8f9808a7e82addfc73a0973b16a8bb684205b Types: Patch
Removed	Reference Type	kernel.org: https://git.kernel.org/stable/c/d2159feb9d28ce496d77df98313ab454646372ac Types: Patch
Removed	Reference Type	kernel.org: https://git.kernel.org/stable/c/d232ca0bbc7d03144bad0ffd1792c3352bfd03fa Types: Patch
Removed	Reference Type	kernel.org: https://git.kernel.org/stable/c/efb15ff4a77fe053c941281775fefa91c87770e0 Types: Patch

Initial Analysis by NIST 4/14/2025 3:49:30 PM

Action	Type	New Value
Added	CVSS V3.1	AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Added	CWE	CWE-476
Added	CPE Configuration	OR cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.20 up to (excluding) 5.4.198 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.10 up to (excluding) 4.14.283 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.15 up to (excluding) 4.19.247 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.18 up to (excluding) 5.18.4 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.16 up to (excluding) 5.17.15 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.11 up to (excluding) 5.15.47 cpe:2.3:o:linux:linux_kernel::::::::* versions up to (excluding) 4.9.318 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.5 up to (excluding) 5.10.122
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/172cfc167c8ee6238f24f9c16efd598602af643c Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/3120aac6d0ecd9accf56894aeac0e265f74d3d5a Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/5127c0f365265bb69cd776ad6e4b872c309f3fa8 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/547ebdc200b862dff761ff4890f66d8217c33316 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/5b0c0298f7c3b57417f1729ec4071f76864b72dd Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/bee8f9808a7e82addfc73a0973b16a8bb684205b Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/d2159feb9d28ce496d77df98313ab454646372ac Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/d232ca0bbc7d03144bad0ffd1792c3352bfd03fa Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/efb15ff4a77fe053c941281775fefa91c87770e0 Types: Patch

New CVE Received from kernel.org 2/26/2025 2:01:06 AM

Action	Type	New Value
Added	Description	In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: gadget: don't reset gadget's driver->bus UDC driver should not touch gadget's driver internals, especially it should not reset driver->bus. This wasn't harmful so far, but since commit fc274c1e9973 ("USB: gadget: Add a new bus for gadgets") gadget subsystem got it's own bus and messing with ->bus triggers the following NULL pointer dereference: dwc2 12480000.hsotg: bound driver g_ether 8<--- cut here --- Unable to handle kernel NULL pointer dereference at virtual address 00000000 [00000000] *pgd=00000000 Internal error: Oops: 5 [#1] SMP ARM Modules linked in: ... CPU: 0 PID: 620 Comm: modprobe Not tainted 5.18.0-rc5-next-20220504 #11862 Hardware name: Samsung Exynos (Flattened Device Tree) PC is at module_add_driver+0x44/0xe8 LR is at sysfs_do_create_link_sd+0x84/0xe0 ... Process modprobe (pid: 620, stack limit = 0x(ptrval)) ... module_add_driver from bus_add_driver+0xf4/0x1e4 bus_add_driver from driver_register+0x78/0x10c driver_register from usb_gadget_register_driver_owner+0x40/0xb4 usb_gadget_register_driver_owner from do_one_initcall+0x44/0x1e0 do_one_initcall from do_init_module+0x44/0x1c8 do_init_module from load_module+0x19b8/0x1b9c load_module from sys_finit_module+0xdc/0xfc sys_finit_module from ret_fast_syscall+0x0/0x54 Exception stack(0xf1771fa8 to 0xf1771ff0) ... dwc2 12480000.hsotg: new device is high-speed ---[ end trace 0000000000000000 ]--- Fix this by removing driver->bus entry reset.
Added	Reference	https://git.kernel.org/stable/c/172cfc167c8ee6238f24f9c16efd598602af643c
Added	Reference	https://git.kernel.org/stable/c/3120aac6d0ecd9accf56894aeac0e265f74d3d5a
Added	Reference	https://git.kernel.org/stable/c/5127c0f365265bb69cd776ad6e4b872c309f3fa8
Added	Reference	https://git.kernel.org/stable/c/547ebdc200b862dff761ff4890f66d8217c33316
Added	Reference	https://git.kernel.org/stable/c/5b0c0298f7c3b57417f1729ec4071f76864b72dd
Added	Reference	https://git.kernel.org/stable/c/bee8f9808a7e82addfc73a0973b16a8bb684205b
Added	Reference	https://git.kernel.org/stable/c/d2159feb9d28ce496d77df98313ab454646372ac
Added	Reference	https://git.kernel.org/stable/c/d232ca0bbc7d03144bad0ffd1792c3352bfd03fa
Added	Reference	https://git.kernel.org/stable/c/efb15ff4a77fe053c941281775fefa91c87770e0

Quick Info

CVE Dictionary Entry:
CVE-2022-49299
NVD Published Date:
02/26/2025
NVD Last Modified:
06/19/2025
Source:
kernel.org

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2022-49299 Detail

Current Description

Analysis Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Change History

CVE Modified by kernel.org 6/19/2025 10:15:34 AM

CVE Rejected by kernel.org 6/19/2025 10:15:34 AM

Initial Analysis by NIST 4/14/2025 3:49:30 PM

New CVE Received from kernel.org 2/26/2025 2:01:06 AM

Quick Info