Riskcovery

CVE-2022-49061

net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

When using a fixed-link, the altr_tse_pcs driver crashes due to null-pointer dereference as no phy_device is provided to tse_pcs_fix_mac_speed function. Fix this by adding a check for phy_dev before calling the tse_pcs_fix_mac_speed() function.

Also clean up the tse_pcs_fix_mac_speed function a bit. There is no need to check for splitter_base and sgmii_adapter_base because the driver will fail if these 2 variables are not derived from the device tree.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • fb3bbdb859891e6bc27fd1afb3a07319f82c2ee4 to before 7e59fdf9547c4f948d1d917ec7ffa5fb5ac53bdbAffected
  • fb3bbdb859891e6bc27fd1afb3a07319f82c2ee4 to before 08d5e3e954537931c8da7428034808d202e98299Affected
  • fb3bbdb859891e6bc27fd1afb3a07319f82c2ee4 to before 62a48383ebe2e159fd68425dd3e16d4c6bd6599aAffected
  • fb3bbdb859891e6bc27fd1afb3a07319f82c2ee4 to before 6c020f05253df04c3480b586fe188a3582740049Affected
  • fb3bbdb859891e6bc27fd1afb3a07319f82c2ee4 to before a6aaa00324240967272b451bfa772547bd576ee6Affected
LinuxLinux
  • 4.8Affected
  • before 4.8Not affected
  • 5.4.190 through 5.4.*Not affected
  • 5.10.112 through 5.10.*Not affected
  • 5.15.35 through 5.15.*Not affected
  • 5.17.4 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.