CVE-2022-49273

A flaw was found in the rtc-pl031 module in the Linux kernel. The alarm feature bit was cleaned before device initialization, which caused a NULL pointer dereference when there was no interrupt line. This resulted in a system crash and a denial of service.

The rtc-pl031 module as shipped in the Linux kernel in Red Hat Enterprise Linux 6, 7 and 8 is not affected by this vulnerability because the vulnerable code was introduced in a newer version of the Linux kernel.

This issue has been fixed in Red Hat Enterprise Linux 9.3 via RHSA-2023:6583 [1].

[1]. https://access.redhat.com/errata/RHSA-2023:6583

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.