CVE-2022-50888 in Linux
Summary
by MITRE • 12/30/2025
In the Linux kernel, the following vulnerability has been resolved:
remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio()
q6v5_wcss_init_mmio() will call platform_get_resource_byname() that may fail and return NULL. devm_ioremap() will use res->start as input, which may causes null-ptr-deref. Check the ret value of platform_get_resource_byname() to avoid the null-ptr-deref.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 04/26/2026
The vulnerability CVE-2022-50888 represents a critical null pointer dereference flaw within the Linux kernel's remote processor subsystem, specifically affecting Qualcomm Q6V5 firmware handling components. This issue resides in the q6v5_wcss_init_mmio() function which manages memory-mapped I/O initialization for wireless communication subsystems. The vulnerability stems from inadequate error handling when retrieving platform resources, creating a scenario where subsequent memory mapping operations can attempt to dereference a null pointer. According to CWE-476, this represents a null pointer dereference vulnerability that can lead to system instability and potential privilege escalation.
The technical implementation of this flaw occurs when the q6v5_wcss_init_mmio() function invokes platform_get_resource_byname() to obtain resource information for memory mapping operations. When this platform resource lookup fails, the function returns NULL instead of a valid resource structure. Subsequent calls to devm_ioremap() then use res->start as an input parameter, where res is NULL, resulting in a null pointer dereference during memory mapping initialization. This pattern violates proper error handling protocols and demonstrates a classic lack of input validation that can be exploited to crash the kernel or potentially escalate privileges. The flaw specifically impacts the Qualcomm Q6V5 remote processor driver, which handles firmware loading and memory management for wireless communication hardware.
The operational impact of this vulnerability extends beyond simple system crashes to potentially compromise the integrity of embedded systems running Linux kernel versions containing this flaw. Attackers with access to the system could exploit this vulnerability to cause denial of service conditions, leading to complete system crashes or reboot cycles that may be difficult to recover from. In environments where wireless communication subsystems are critical, such as automotive systems, industrial control networks, or mobile devices, this vulnerability could result in service disruption or even safety hazards. The vulnerability aligns with ATT&CK technique T1499.001, which covers network denial of service attacks, and represents a privilege escalation vector that could allow attackers to gain elevated system privileges.
Mitigation strategies for CVE-2022-50888 require immediate patch application to kernel versions containing the vulnerable code, with system administrators prioritizing updates to the Linux kernel to address the null pointer dereference. The fix implements proper error checking by validating the return value from platform_get_resource_byname() before proceeding with memory mapping operations. Organizations should also implement monitoring for unusual system behavior that might indicate exploitation attempts, including unexpected kernel crashes or reboot patterns. System hardening measures such as disabling unnecessary wireless subsystems and implementing proper access controls can reduce the attack surface. The vulnerability demonstrates the importance of proper error handling in kernel space code and highlights the need for comprehensive testing of resource allocation functions in embedded systems. Additionally, implementing automated patch management systems can help ensure timely deployment of security fixes across all affected systems.