CVE-2022-49848

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49848

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-combo: fix NULL-deref on runtime resume Commit fc64623637da ("phy: qcom-qmp-combo,usb: add support for separate PCS_USB region") started treating the PCS_USB registers as potentially separate from the PCS registers but used the wrong base when no PCS_USB offset has been provided. Fix the PCS_USB base used at runtime resume to prevent dereferencing a NULL pointer on platforms that do not provide a PCS_USB offset (e.g. SC7180).

References
Link Resource
https://git.kernel.org/stable/c/04948e757148f870a31f4887ea2239403f516c3c Patch
https://git.kernel.org/stable/c/c559a8b5cfa3db196ced0257b288f17027621348 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
History

07 May 2025, 13:33

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/04948e757148f870a31f4887ea2239403f516c3c - () https://git.kernel.org/stable/c/04948e757148f870a31f4887ea2239403f516c3c - Patch
References () https://git.kernel.org/stable/c/c559a8b5cfa3db196ced0257b288f17027621348 - () https://git.kernel.org/stable/c/c559a8b5cfa3db196ced0257b288f17027621348 - Patch
CWE CWE-476

02 May 2025, 13:53

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: phy: qcom-qmp-combo: corrección de la desreferencia de NULL al reanudar la ejecución. El commit fc64623637da ("phy: qcom-qmp-combo,usb: añadir compatibilidad con la región PCS_USB independiente") comenzó a tratar los registros PCS_USB como potencialmente independientes de los registros PCS, pero utilizaba la base incorrecta cuando no se proporcionaba un desplazamiento PCS_USB. Se corrigió la base PCS_USB utilizada al reanudar la ejecución para evitar la desreferenciación de un puntero NULL en plataformas que no proporcionan un desplazamiento PCS_USB (p. ej., SC7180).

01 May 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-01 15:16

Updated : 2025-10-01 17:15

NVD link : CVE-2022-49848

Mitre link : CVE-2022-49848

CVE.ORG link : CVE-2022-49848

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference