Back to CVE records
Not yet scoredPublished Dec 30, 2025

CVE-2022-50888remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio()

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() q6v5_wcss_init_mmio() will call platform_get_resource_byname() that may fail and return NULL. devm_ioremap() will use res->start as input, which may causes null-ptr-deref. Check the ret value of platform_get_resource_byname() to avoid the null-ptr-deref.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from 0af65b9b915e52019aee91db3e1f8b39a7ec8d08 before 098ebb9089c4eedea09333f912d105fa63377496; from 0af65b9b915e52019aee91db3e1f8b39a7ec8d08 before 3afa88ae9911b65702a3aca9d92ea23fe496e56f; from 0af65b9b915e52019aee91db3e1f8b39a7ec8d08 before 0903a87490a9ed456ac765a84dcc484c1ee42c32; from 0af65b9b915e52019aee91db3e1f8b39a7ec8d08 before f360e2b275efbb745ba0af8b47d9ef44221be586
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.