CVE-2022-49061 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link When using a fixed-link, the altr_tse_pcs driver crashes due to null-pointer dereference as no phy_device is provided to tse_pcs_fix_mac_speed function. Fix this by adding a check for phy_dev before calling the tse_pcs_fix_mac_speed() function. Also clean up the tse_pcs_fix_mac_speed function a bit. There is no need to check for splitter_base and sgmii_adapter_base because the driver will fail if these 2 variables are not derived from the device tree.
A null pointer dereference vulnerability has been identified in the Linux kernel's altr_tse_pcs driver, specifically when using a fixed-link configuration. The issue arises because the driver does not receive a phy_device, leading to a crash when the tse_pcs_fix_mac_speed function is called. The vulnerability has been addressed by adding a check for the phy_dev before invoking the tse_pcs_fix_mac_speed function. Additionally, the tse_pcs_fix_mac_speed function has been cleaned up to remove unnecessary checks for splitter_base and sgmii_adapter_base, as the driver would fail if these variables are not properly set in the device tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/08d5e3e954537931c8da7428034808d202e98299 | kernel.org | Patch |
| https://git.kernel.org/stable/c/62a48383ebe2e159fd68425dd3e16d4c6bd6599a | kernel.org | Patch |
| https://git.kernel.org/stable/c/6c020f05253df04c3480b586fe188a3582740049 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7e59fdf9547c4f948d1d917ec7ffa5fb5ac53bdb | kernel.org | Patch |
| https://git.kernel.org/stable/c/a6aaa00324240967272b451bfa772547bd576ee6 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
| CWE-476 | NULL Pointer Dereference | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.8, < 5.4.190 >= 5.5, < 5.10.112 >= 5.11, < 5.15.35 >= 5.16, < 5.17.4 5.18 rc1 5.18 rc2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 1, 2025 | CVE Modified | CISA-ADP |
| Mar 18, 2025 | Initial Analysis | [email protected] |
| Feb 26, 2025 | New CVE Received | kernel.org |