CVE-2022-49692
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
26/02/2025
Last modified:
01/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: phy: at803x: fix NULL pointer dereference on AR9331 PHY<br />
<br />
Latest kernel will explode on the PHY interrupt config, since it depends<br />
now on allocated priv. So, run probe to allocate priv to fix it.<br />
<br />
ar9331_switch ethernet.1:10 lan0 (uninitialized): PHY [!ahb!ethernet@1a000000!mdio!switch@10:00] driver [Qualcomm Atheros AR9331 built-in PHY] (irq=13)<br />
CPU 0 Unable to handle kernel paging request at virtual address 0000000a, epc == 8050e8a8, ra == 80504b34<br />
...<br />
Call Trace:<br />
[] at803x_config_intr+0x5c/0xd0<br />
[] phy_request_interrupt+0xa8/0xd0<br />
[] phylink_bringup_phy+0x2d8/0x3ac<br />
[] phylink_fwnode_phy_connect+0x118/0x130<br />
[] dsa_slave_create+0x270/0x420<br />
[] dsa_port_setup+0x12c/0x148<br />
[] dsa_register_switch+0xaf0/0xcc0<br />
[] ar9331_sw_probe+0x370/0x388<br />
[] mdio_probe+0x44/0x70<br />
[] really_probe+0x200/0x424<br />
[] __driver_probe_device+0x290/0x298<br />
[] driver_probe_device+0x54/0xe4<br />
[] __device_attach_driver+0xe4/0x130<br />
[] bus_for_each_drv+0xb4/0xd8<br />
[] __device_attach+0x104/0x1a4<br />
[] bus_probe_device+0x48/0xc4<br />
[] deferred_probe_work_func+0xf0/0x10c<br />
[] process_one_work+0x314/0x4d4<br />
[] worker_thread+0x2a4/0x354<br />
[] kthread+0x134/0x13c<br />
[] ret_from_kernel_thread+0x14/0x1c<br />
<br />
Same Issue would affect some other PHYs (QCA8081, QCA9561), so fix it<br />
too.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.18 (including) | 5.18.8 (excluding) |
| cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



