In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable

The function performs a check on the "phy" input parameter, however, it
is used before the check.

Initialize the "dev" variable after the sanity check to avoid a possible
NULL pointer dereference.

Addresses-Coverity-ID: 1493860 ("Null pointer dereference")

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00026.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
5c8290284402bf7d2c12269402b3177b899c78b7 affected
< 6d9f8ba28f3747ca0f910a363e46f1114856dbbe
5c8290284402bf7d2c12269402b3177b899c78b7 affected
< ca63eeb70fcb53c42e1fe54e1735a54d8e7759fd
5c8290284402bf7d2c12269402b3177b899c78b7 affected
< 581317b1f001b7509041544d7019b75571daa100
5c8290284402bf7d2c12269402b3177b899c78b7 affected
< 79c0b5287ded74f4eacde4dfd8aa0a76cbd853b5
5c8290284402bf7d2c12269402b3177b899c78b7 affected
< 56480fb10b976581a363fd168dc2e4fbee87a1a7
5c8290284402bf7d2c12269402b3177b899c78b7 affected
< 2b7e7df1eacd280e561ede3e977853606871c951
5c8290284402bf7d2c12269402b3177b899c78b7 affected
< 5e761a2287234bc402ba7ef07129f5103bcd775c
Linux Linux affected
Version Status Constraints
4.3 affected
—
0 unaffected
< 4.3
4.14.265 unaffected
≤ 4.14.*
4.19.228 unaffected
≤ 4.19.*
5.4.176 unaffected
≤ 5.4.*
5.10.96 unaffected
≤ 5.10.*
5.15.19 unaffected
≤ 5.15.*
5.16.5 unaffected
≤ 5.16.*
5.17 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/2b7e7df1eacd280e561ede3e977853606871c951 cve-icon cve-icon
https://git.kernel.org/stable/c/56480fb10b976581a363fd168dc2e4fbee87a1a7 cve-icon cve-icon
https://git.kernel.org/stable/c/581317b1f001b7509041544d7019b75571daa100 cve-icon cve-icon
https://git.kernel.org/stable/c/5e761a2287234bc402ba7ef07129f5103bcd775c cve-icon cve-icon
https://git.kernel.org/stable/c/6d9f8ba28f3747ca0f910a363e46f1114856dbbe cve-icon cve-icon
https://git.kernel.org/stable/c/79c0b5287ded74f4eacde4dfd8aa0a76cbd853b5 cve-icon cve-icon
https://git.kernel.org/stable/c/ca63eeb70fcb53c42e1fe54e1735a54d8e7759fd cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024062007-CVE-2022-48756-fc26@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48756 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48756 cve-icon
History

Wed, 18 Sep 2024 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T08:22:26.657Z

Reserved: 2024-06-20T11:09:39.059Z

Link: CVE-2022-48756

cve-icon Vulnrichment

Updated: 2024-08-03T15:25:00.449Z

cve-icon NVD

Status : Modified

Published: 2024-06-20T12:15:13.740

Modified: 2024-11-21T07:33:56.590

Link: CVE-2022-48756

cve-icon Redhat

Severity : Low

Publid Date: 2024-06-20T00:00:00Z

Links: CVE-2022-48756 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses