CVE-2022-49487: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49487 affects the Linux kernel's MTD (Memory Technology Device) NAND flash subsystem, specifically in the Intel NAND controller driver. The vulnerability was discovered in the ebunandprobe() function where a potential null pointer dereference could occur when accessing the 'res' pointer if platformgetresource() returns NULL (Kernel Git).

The vulnerability exists in the drivers/mtd/nand/raw/intel-nand-controller.c file where the code attempts to access res->start before checking if the resource pointer is valid. The fix involves moving the res->start access after the devmioremapresource() call, which includes proper NULL pointer validation (Kernel Git).

If exploited, this vulnerability could lead to a null pointer dereference in the kernel, potentially causing a system crash or denial of service condition when interacting with Intel NAND controller hardware (Debian Tracker).

The issue has been fixed in the Linux kernel by moving the res->start access after the devmioremapresource() validation check. Users should update to a patched kernel version that includes commit ddf66aefd685fd46500b9917333e1b1e118276dc (Debian Tracker).