Vulnerability in Linux

CVE-2022-50888

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() q6v5_wcss_init_mmio() will call platform_get_resource_byname() that may fail and return NULL. devm_ioremap() will use res->start as input, which may causes null-ptr-deref. Check the ret value of platform_get_resource_byname() to avoid the null-ptr-deref.

EPSS: 0.002 (6.4th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 0af65b9b915e52019aee91db3e1f8b39a7ec8d08, 5.13, 0

References