← CVE Intelligence

CVE-2022-50888

remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() q6v5_wcss_init_mmio() will call platform_get_resource_byname() that may fail and return NULL. devm_ioremap() will use res->start as input, which may causes null-ptr-deref. Check the ret value of platform_get_resource_byname() to avoid the null-ptr-deref.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 0af65b9b915e52019aee91db3e1f8b39a7ec8d08 before 098ebb9089c4eedea09333f912d105fa63377496; affected 0af65b9b915e52019aee91db3e1f8b39a7ec8d08 before 3afa88ae9911b65702a3aca9d92ea23fe496e56f; affected 0af65b9b915e52019aee91db3e1f8b39a7ec8d08 before 0903a87490a9ed456ac765a84dcc484c1ee42c32; affected 0af65b9b915e52019aee91db3e1f8b39a7ec8d08 before f360e2b275efbb745ba0af8b47d9ef44221be586
Linux / Linuxaffected 5.13; unaffected 0 before 5.13; unaffected 5.15.86 through 5.15.*; unaffected 6.0.16 through 6.0.*; unaffected 6.1.2 through 6.1.*; unaffected 6.2 through *

CWE

No CWE identifiers supplied.

References