PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2022-50888

CVE-2022-50888

kernel: remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio()

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · June 30, 2026

Description

A NULL pointer dereference flaw was found in the Qualcomm Q6v5 WCSS remoteproc driver. The q6v5_wcss_init_mmio() function does not check the return value of platform_get_resource_byname() before using it, which can lead to a NULL pointer dereference if the resource lookup fails.

Statement

This affects only Qualcomm platforms using the Q6v5 WCSS remoteproc driver. The issue would only occur with incorrect device tree configuration or when expected platform resources are missing. Standard x86 and most ARM systems are unaffected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-476 · NULL Pointer Dereference