CVE-2022-50888

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s remoteproc subsystem, specifically within the q6v5 component. The q6v5 wcss init mmio() function may experience a null pointer dereference. This occurs because platform get resource byname() can return NULL, and this NULL value is subsequently used as input to devm ioremap(), leading to the dereference. A check for the return value of platform get resource byname() has been implemented to prevent this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.