Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-49756

phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() sp_usb_phy_probe() will call platform_get_resource_byname() that may fail and return NULL. devm_ioremap() will use usbphy->moon4_res_mem->start as input, which may causes null-ptr-deref. Check the ret value of platform_get_resource_byname() to avoid the null-ptr-deref.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 99d9ccd97385208b78b3d88e756451f4b70119fc to < d838b5c99bcecd593b4710a93fce8fdbf122395baffected
  • 99d9ccd97385208b78b3d88e756451f4b70119fc to < 17eee264ef386ef30a69dd70e36f29893b85c170affected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.9 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References