CVE-2022-49061

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49061
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link When using a fixed-link, the altr_tse_pcs driver crashes due to null-pointer dereference as no phy_device is provided to tse_pcs_fix_mac_speed function. Fix this by adding a check for phy_dev before calling the tse_pcs_fix_mac_speed() function. Also clean up the tse_pcs_fix_mac_speed function a bit. There is no need to check for splitter_base and sgmii_adapter_base because the driver will fail if these 2 variables are not derived from the device tree.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/08d5e3e954537931c8da7428034808d202e98299 Patch
https://git.kernel.org/stable/c/62a48383ebe2e159fd68425dd3e16d4c6bd6599a Patch
https://git.kernel.org/stable/c/6c020f05253df04c3480b586fe188a3582740049 Patch
https://git.kernel.org/stable/c/7e59fdf9547c4f948d1d917ec7ffa5fb5ac53bdb Patch
https://git.kernel.org/stable/c/a6aaa00324240967272b451bfa772547bd576ee6 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*
History

18 Mar 2025, 18:27

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/08d5e3e954537931c8da7428034808d202e98299 - () https://git.kernel.org/stable/c/08d5e3e954537931c8da7428034808d202e98299 - Patch
References () https://git.kernel.org/stable/c/62a48383ebe2e159fd68425dd3e16d4c6bd6599a - () https://git.kernel.org/stable/c/62a48383ebe2e159fd68425dd3e16d4c6bd6599a - Patch
References () https://git.kernel.org/stable/c/6c020f05253df04c3480b586fe188a3582740049 - () https://git.kernel.org/stable/c/6c020f05253df04c3480b586fe188a3582740049 - Patch
References () https://git.kernel.org/stable/c/7e59fdf9547c4f948d1d917ec7ffa5fb5ac53bdb - () https://git.kernel.org/stable/c/7e59fdf9547c4f948d1d917ec7ffa5fb5ac53bdb - Patch
References () https://git.kernel.org/stable/c/a6aaa00324240967272b451bfa772547bd576ee6 - () https://git.kernel.org/stable/c/a6aaa00324240967272b451bfa772547bd576ee6 - Patch
CPE cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: ethernet: stmmac: corregir la función altr_tse_pcs al usar un enlace fijo Al usar un enlace fijo, el controlador altr_tse_pcs se bloquea debido a la desreferencia de puntero nulo ya que no se proporciona ningún phy_device a la función tse_pcs_fix_mac_speed. Solucione esto agregando una verificación para phy_dev antes de llamar a la función tse_pcs_fix_mac_speed(). También limpie un poco la función tse_pcs_fix_mac_speed. No es necesario verificar splitter_base y sgmii_adapter_base porque el controlador fallará si estas 2 variables no se derivan del árbol de dispositivos.

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-18 18:27

NVD link : CVE-2022-49061

Mitre link : CVE-2022-49061

CVE.ORG link : CVE-2022-49061

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference