CVE-2022-49848

phy: qcom-qmp-combo: fix NULL-deref on runtime resume

Medium · published May 1, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

phy: qcom-qmp-combo: fix NULL-deref on runtime resume

Commit fc64623637da ("phy: qcom-qmp-combo,usb: add support for separate

PCS_USB region") started treating the PCS_USB registers as potentially

separate from the PCS registers but used the wrong base when no PCS_USB

offset has been provided.

Fix the PCS_USB base used at runtime resume to prevent dereferencing a

NULL pointer on platforms that do not provide a PCS_USB offset (e.g.

SC7180).

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.1th percentile
Published
2025-05-01T14:10Z
EPSS history
Timeline
  • 01 MAY 14:10Z
    phy: qcom-qmp-combo: fix NULL-deref on runtime resume
    cvelistv5