CVEvulnerability
CVE-2026-45874
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-27
- Last modified
- 2026-06-25
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved:
phy: freescale: imx8qm-hsio: fix NULL pointer dereference
During the probe the refclk_pad pointer is set to NULL if the
'fsl,refclk-pad-mode' property is not defined in the devicetree node. But
in imx_hsio_configure_clk_pad() this pointer is unconditionally used which
could result in a NULL pointer dereference. So check the pointer before to
use it.
Affected configurations
• linux linux kernel (>= 6.11 < 6.12.75)
• linux linux kernel (>= 6.13 < 6.18.14)
• linux linux kernel (>= 6.19 < 6.19.4)
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://git.kernel.org/stable/c/4dd5d4c0361af0a3fd24f45c815996abf4429770 Patch
- https://git.kernel.org/stable/c/8d29e81e9cdec84d4b9acb1736550d35e86c88af Patch
- https://git.kernel.org/stable/c/a771b386cb6c6e582e7b50f8eeff3347ff887f71 Patch
- https://git.kernel.org/stable/c/dd8b9ba3d9701832cfb5dcefd8b43250df28dbc2 Patch