CVE-2022-49302: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49302 affects the Linux kernel's USB host controller driver (isp116x). The vulnerability was discovered in the handling of platform resources, specifically where the return value of platform_get_resource() was not properly checked. This issue was disclosed on February 26, 2025, affecting various Linux kernel versions (NVD).

The vulnerability exists in the isp116x-hcd.c driver file where the code fails to verify the return value of platform_get_resource() before accessing its members. When platform_get_resource() returns NULL, attempting to access res->start results in a null pointer dereference. The fix involves adding proper null checks before accessing the resource structure (Kernel Commit).

If exploited, this vulnerability can cause a null pointer dereference in the Linux kernel's USB subsystem, potentially leading to a system crash or denial of service condition when interacting with USB devices using the isp116x host controller (Ubuntu).

The issue has been fixed in various Linux kernel versions through patches that add proper null pointer checks. Ubuntu has released fixes for multiple kernel versions including 4.15.0-192.203 for bionic and 5.4.0-126.142~18.04.1 for linux-hwe-5.4. Users are advised to update their kernel to patched versions (Ubuntu).