CVE-2022-49448: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49448 affects the Linux kernel's BCM (Broadcom) Power Management Block (PMB) driver. The vulnerability was discovered in the soc/bcm component where a potential NULL pointer dereference could occur due to an unchecked return value from devm_kzalloc(). This issue was identified and resolved in 2022, with the fix being committed to the Linux kernel repository (Kernel Git).

The vulnerability exists in the bcm-pmb.c driver file where the devm_kzalloc() function's return value was not being checked for NULL. If the memory allocation fails, subsequent code accessing 'pd->pmb' could trigger a null pointer dereference. The issue was fixed by adding a NULL check after the devm_kzalloc() call and returning -ENOMEM if the allocation fails (Kernel Git).

If exploited, this vulnerability could lead to a null pointer dereference in the Linux kernel's BCM PMB driver, potentially causing a system crash or denial of service condition (NVD).

The vulnerability requires local access to the system and the ability to trigger memory allocation failures in the BCM PMB driver. The exploitation complexity is considered low as it involves normal operating conditions that could lead to memory allocation failures (NVD).

The issue has been fixed by adding proper NULL pointer checking after the devm_kzalloc() call. The fix was implemented in commit b4bd2aafacce48db26b0a213d849818d940556dd and has been backported to various stable kernel versions (Kernel Git).