{"id":"CVE-2022-49010","summary":"hwmon: (coretemp) Check for null before removing sysfs attrs","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (coretemp) Check for null before removing sysfs attrs\n\nIf coretemp_add_core() gets an error then pdata-\u003ecore_data[indx]\nis already NULL and has been kfreed. Don't pass that to\nsysfs_remove_group() as that will crash in sysfs_remove_group().\n\n[Shortened for readability]\n[91854.020159] sysfs: cannot create duplicate filename '/devices/platform/coretemp.0/hwmon/hwmon2/temp20_label'\n\u003ccpu offline\u003e\n[91855.126115] BUG: kernel NULL pointer dereference, address: 0000000000000188\n[91855.165103] #PF: supervisor read access in kernel mode\n[91855.194506] #PF: error_code(0x0000) - not-present page\n[91855.224445] PGD 0 P4D 0\n[91855.238508] Oops: 0000 [#1] PREEMPT SMP PTI\n...\n[91855.342716] RIP: 0010:sysfs_remove_group+0xc/0x80\n...\n[91855.796571] Call Trace:\n[91855.810524]  coretemp_cpu_offline+0x12b/0x1dd [coretemp]\n[91855.841738]  ? coretemp_cpu_online+0x180/0x180 [coretemp]\n[91855.871107]  cpuhp_invoke_callback+0x105/0x4b0\n[91855.893432]  cpuhp_thread_fun+0x8e/0x150\n...\n\nFix this by checking for NULL first.","modified":"2026-04-02T08:27:13.828409Z","published":"2024-10-21T20:06:21.423Z","related":["SUSE-SU-2024:3983-1","SUSE-SU-2024:3985-1","SUSE-SU-2024:4082-1","SUSE-SU-2024:4100-1","SUSE-SU-2024:4131-1","SUSE-SU-2024:4313-1","SUSE-SU-2024:4317-1","SUSE-SU-2024:4364-1","SUSE-SU-2025:0034-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49010.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/070d5ea4a0592a37ad96ce7f7b6b024f90bb009f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/280110db1a7d62ad635b103bafc3ae96e8bef75c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7692700ac818866d138a8de555130a6e70e6ac16"},{"type":"WEB","url":"https://git.kernel.org/stable/c/89eecabe6a47403237f45aafd7d24f93cb973653"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a89ff5f5cc64b9fe7a992cf56988fd36f56ca82a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ae6c8b6e5d5628df1c475c0a8fca1465e205c95b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f06e0cd01eab954bd5f2190c9faa79bb5357e05b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fb503d077ff7b43913503eaf72995d1239028b99"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49010.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49010"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"199e0de7f5df31a4fc485d4aaaf8a07718252ace"},{"fixed":"fb503d077ff7b43913503eaf72995d1239028b99"},{"fixed":"070d5ea4a0592a37ad96ce7f7b6b024f90bb009f"},{"fixed":"280110db1a7d62ad635b103bafc3ae96e8bef75c"},{"fixed":"89eecabe6a47403237f45aafd7d24f93cb973653"},{"fixed":"f06e0cd01eab954bd5f2190c9faa79bb5357e05b"},{"fixed":"7692700ac818866d138a8de555130a6e70e6ac16"},{"fixed":"ae6c8b6e5d5628df1c475c0a8fca1465e205c95b"},{"fixed":"a89ff5f5cc64b9fe7a992cf56988fd36f56ca82a"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49010.json"}}],"schema_version":"1.7.5"}