Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: phy: freescale: imx8qm-hsio: fix NULL pointer dereference During the probe the refclk_pad pointer is set to NULL if the 'fsl,refclk-pad-mode' property is not defined in the devicetree node. But in imx_hsio_configure_clk_pad() this pointer is unconditionally used which could result in a NULL pointer dereference. So check the pointer before to use it.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.11, < 6.12.75 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/4dd5d4c0361af0a3fd24f45c815996abf4429770Patch
- https://git.kernel.org/stable/c/8d29e81e9cdec84d4b9acb1736550d35e86c88afPatch
- https://git.kernel.org/stable/c/a771b386cb6c6e582e7b50f8eeff3347ff887f71Patch
- https://git.kernel.org/stable/c/dd8b9ba3d9701832cfb5dcefd8b43250df28dbc2Patch
FAQ
What is CVE-2026-45874?
CVE-2026-45874 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: phy: freescale: imx8qm-hsio: fix NULL pointer dereference During the probe the refclk_pad pointer is set to NULL if the 'fsl,refcl...
How severe is CVE-2026-45874?
CVE-2026-45874 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-45874?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.