Riskcovery

CVE-2026-45874

phy: freescale: imx8qm-hsio: fix NULL pointer dereference

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
May 27, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

phy: freescale: imx8qm-hsio: fix NULL pointer dereference

During the probe the refclk_pad pointer is set to NULL if the 'fsl,refclk-pad-mode' property is not defined in the devicetree node. But in imx_hsio_configure_clk_pad() this pointer is unconditionally used which could result in a NULL pointer dereference. So check the pointer before to use it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 82c56b6dd24fcdf811f2b47b72e5585c8a79b685 to before a771b386cb6c6e582e7b50f8eeff3347ff887f71Affected
  • 82c56b6dd24fcdf811f2b47b72e5585c8a79b685 to before dd8b9ba3d9701832cfb5dcefd8b43250df28dbc2Affected
  • 82c56b6dd24fcdf811f2b47b72e5585c8a79b685 to before 8d29e81e9cdec84d4b9acb1736550d35e86c88afAffected
  • 82c56b6dd24fcdf811f2b47b72e5585c8a79b685 to before 4dd5d4c0361af0a3fd24f45c815996abf4429770Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.