CVE-2026-45874 Details
Description
In the Linux kernel, the following vulnerability has been resolved: phy: freescale: imx8qm-hsio: fix NULL pointer dereference During the probe the refclk_pad pointer is set to NULL if the 'fsl,refclk-pad-mode' property is not defined in the devicetree node. But in imx_hsio_configure_clk_pad() this pointer is unconditionally used which could result in a NULL pointer dereference. So check the pointer before to use it.
A NULL pointer dereference vulnerability has been identified in the Linux kernel's Freescale i.MX8QM HSIO PHY driver. The issue arises during the probe process, where the 'refclk_pad' pointer is set to NULL if the 'fsl,refclk-pad-mode' property is not specified in the device tree node. This NULL pointer is then unconditionally used in the 'imx_hsio_configure_clk_pad()' function, potentially leading to a NULL pointer dereference. The vulnerability has been addressed by adding a check to ensure the pointer is not NULL before use.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux Kernel Archive.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/4dd5d4c0361af0a3fd24f45c815996abf4429770 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8d29e81e9cdec84d4b9acb1736550d35e86c88af | kernel.org | Patch |
| https://git.kernel.org/stable/c/a771b386cb6c6e582e7b50f8eeff3347ff887f71 | kernel.org | Patch |
| https://git.kernel.org/stable/c/dd8b9ba3d9701832cfb5dcefd8b43250df28dbc2 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.11, < 6.12.75 >= 6.13, < 6.18.14 >= 6.19, < 6.19.4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 25, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |