CVE-2022-49472

net: phy: micrel: Allow probing without .driver_data

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: phy: micrel: Allow probing without .driver_data

Currently, if the .probe element is present in the phy_driver structure and the .driver_data is not, a NULL pointer dereference happens.

Allow passing .probe without .driver_data by inserting NULL checks for priv->type.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 7dcb404662839a4ed1a9703658fee979eb894ca4Affected e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 91e720b32cba25fa58eaa4c88fe957009cffe9f3Affected e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 1e5fbfc2a6f384e3195446c14bbd3bc298eb88c2Affected e6a423a81da0eb3da755428f4d2df5a9ba13030f to before abb5594ae2ba7b82cce85917cc6337ec5d774837Affected e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 660dfa033ccc9afb032015b6dc76e846bba42cfbAffected e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 143878e18001c5a61fcc7ae5c5240323753bb641Affected e6a423a81da0eb3da755428f4d2df5a9ba13030f to before bd219273b4e004a3f853da72e111fc8f81357501Affected e6a423a81da0eb3da755428f4d2df5a9ba13030f to before f2ef6f7539c68c6bd6c32323d8845ee102b7c450Affected
LinuxLinux	3.19Affected before 3.19Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 7dcb404662839a4ed1a9703658fee979eb894ca4Affected
e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 91e720b32cba25fa58eaa4c88fe957009cffe9f3Affected
e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 1e5fbfc2a6f384e3195446c14bbd3bc298eb88c2Affected
e6a423a81da0eb3da755428f4d2df5a9ba13030f to before abb5594ae2ba7b82cce85917cc6337ec5d774837Affected
e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 660dfa033ccc9afb032015b6dc76e846bba42cfbAffected
e6a423a81da0eb3da755428f4d2df5a9ba13030f to before 143878e18001c5a61fcc7ae5c5240323753bb641Affected
e6a423a81da0eb3da755428f4d2df5a9ba13030f to before bd219273b4e004a3f853da72e111fc8f81357501Affected
e6a423a81da0eb3da755428f4d2df5a9ba13030f to before f2ef6f7539c68c6bd6c32323d8845ee102b7c450Affected

LinuxLinux

3.19Affected
before 3.19Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.