CVE-2022-49061

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49061
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49061.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49061
Downstream
Related
Published
2025-02-26T01:54:31.142Z
Modified
2026-05-18T05:55:49.930569559Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
Details

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link

When using a fixed-link, the altrtsepcs driver crashes due to null-pointer dereference as no phydevice is provided to tsepcsfixmacspeed function. Fix this by adding a check for phydev before calling the tsepcsfixmacspeed() function.

Also clean up the tsepcsfixmacspeed function a bit. There is no need to check for splitterbase and sgmiiadapter_base because the driver will fail if these 2 variables are not derived from the device tree.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49061.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fb3bbdb859891e6bc27fd1afb3a07319f82c2ee4
Fixed
7e59fdf9547c4f948d1d917ec7ffa5fb5ac53bdb
Fixed
08d5e3e954537931c8da7428034808d202e98299
Fixed
62a48383ebe2e159fd68425dd3e16d4c6bd6599a
Fixed
6c020f05253df04c3480b586fe188a3582740049
Fixed
a6aaa00324240967272b451bfa772547bd576ee6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49061.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.8.0
Fixed
5.4.190
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.112
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.35
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.17.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49061.json"