CVE-2022-49848: phy: qcom-qmp-combo: fix NULL-deref on runtime resume
In the Linux kernel, the following vulnerability has been resolved:
phy: qcom-qmp-combo: fix NULL-deref on runtime resume
Commit fc64623637da ("phy: qcom-qmp-combo,usb: add support for separate PCSUSB region") started treating the PCSUSB registers as potentially separate from the PCS registers but used the wrong base when no PCSUSB offset has been provided.
Fix the PCSUSB base used at runtime resume to prevent dereferencing a NULL pointer on platforms that do not provide a PCSUSB offset (e.g. SC7180).
Affected Software
Remediation
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel qcom-qmp-combo PHY driver on platforms that do not provide a PCS_USB offset are affected. SC7180 is identified as an example.
What condition triggers the failure?
The failure occurs during runtime resume, when the driver uses an incorrect PCS_USB base on a platform without a separate PCS_USB offset. This can result in a NULL pointer dereference and denial of service.
Is there a mitigation if patching cannot be done immediately?
The provided data identifies a patch as available but does not specify a workaround or configuration-based mitigation.