PT-2025-18565 · Linux+2 · Linux Kernel+2

Published 2023-05-09 · Updated 2025-05-02 · CVE-2022-49848

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the phy: qcom-qmp-combo module. The issue involved a NULL pointer dereference when resuming execution, due to incorrect handling of PCS USB registers. This occurred when no PCS USB offset was provided, causing the use of the wrong base. The fix prevents dereferencing a NULL pointer on platforms that do not provide a PCS USB offset, such as SC7180.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49848

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Astra Linux

Linux Kernel

Red Hat

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49848.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49848 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49848 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49848 · Security Note
• https://git.kernel.org/stable/c/04948e757148f870a31f4887ea2239403f516c3c · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49848 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49848 · Vendor Advisory
• https://git.kernel.org/stable/c/c559a8b5cfa3db196ced0257b288f17027621348 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49848 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49848 · Vendor Advisory
• https://git.kernel.org/linus/04948e757148f870a31f4887ea2239403f516c3c · Note
• https://twitter.com/CVEnew/status/1917950874317623452 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2025050143-CVE-2022-49848-0e49@gregkh/T · Note