CVE-2022-49692

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
26/02/2025
Last modified:
01/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: phy: at803x: fix NULL pointer dereference on AR9331 PHY<br /> <br /> Latest kernel will explode on the PHY interrupt config, since it depends<br /> now on allocated priv. So, run probe to allocate priv to fix it.<br /> <br /> ar9331_switch ethernet.1:10 lan0 (uninitialized): PHY [!ahb!ethernet@1a000000!mdio!switch@10:00] driver [Qualcomm Atheros AR9331 built-in PHY] (irq=13)<br /> CPU 0 Unable to handle kernel paging request at virtual address 0000000a, epc == 8050e8a8, ra == 80504b34<br /> ...<br /> Call Trace:<br /> [] at803x_config_intr+0x5c/0xd0<br /> [] phy_request_interrupt+0xa8/0xd0<br /> [] phylink_bringup_phy+0x2d8/0x3ac<br /> [] phylink_fwnode_phy_connect+0x118/0x130<br /> [] dsa_slave_create+0x270/0x420<br /> [] dsa_port_setup+0x12c/0x148<br /> [] dsa_register_switch+0xaf0/0xcc0<br /> [] ar9331_sw_probe+0x370/0x388<br /> [] mdio_probe+0x44/0x70<br /> [] really_probe+0x200/0x424<br /> [] __driver_probe_device+0x290/0x298<br /> [] driver_probe_device+0x54/0xe4<br /> [] __device_attach_driver+0xe4/0x130<br /> [] bus_for_each_drv+0xb4/0xd8<br /> [] __device_attach+0x104/0x1a4<br /> [] bus_probe_device+0x48/0xc4<br /> [] deferred_probe_work_func+0xf0/0x10c<br /> [] process_one_work+0x314/0x4d4<br /> [] worker_thread+0x2a4/0x354<br /> [] kthread+0x134/0x13c<br /> [] ret_from_kernel_thread+0x14/0x1c<br /> <br /> Same Issue would affect some other PHYs (QCA8081, QCA9561), so fix it<br /> too.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.18 (including) 5.18.8 (excluding)
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*