CVE-2022-49494: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49494 affects the Linux kernel's MTD (Memory Technology Device) NAND flash driver, specifically the Cadence NAND controller component. The vulnerability was discovered in 2022 and involves a potential null pointer dereference in the cadencenanddt_probe() function (Kernel Commit).

The vulnerability exists in the cadencenanddtprobe() function where a null pointer dereference could occur when using the 'res' variable if platformgetresource() returns NULL. The issue stems from accessing res->start before properly validating the resource mapping. The fix involves reordering operations to ensure proper validation through devmplatformgetandioremapresource() and simplifying the code structure (Kernel Commit).

If exploited, this vulnerability could lead to a kernel crash due to the null pointer dereference, potentially causing a denial of service condition on affected systems running the vulnerable Linux kernel versions with the Cadence NAND controller driver (Kernel Commit).

The issue has been fixed by modifying the code to use devmplatformgetandioremap_resource() and properly ordering the resource validation checks. Users should update to a patched kernel version that includes the fix (Kernel Commit).