Memory Dereference Issue in Linux Kernel Affects Qualcomm Q6v5 Devices

CVE-2022-50888

What is CVE-2022-50888?

A vulnerability in the Linux kernel affects the Qualcomm Q6v5 hardware platform, specifically within the remoteproc subsystem. The issue arises in the q6v5_wcss_init_mmio() function where it may attempt to dereference a null pointer. This occurs when platform_get_resource_byname() fails and returns NULL, leading to a risk of null pointer dereference during memory mapping. Developers are advised to implement proper error checks on the return value of platform_get_resource_byname() to mitigate this risk.

References