CVE-2022-48756

What it actually does

The msm_dsi_phy_enable function dereferences the phy input parameter prior to a null check, allowing a possible NULL pointer dereference when dev is initialized after the sanity check fails.

Why it matters to the business

Kernel instability or crashes on Linux systems using Qualcomm MSM DSI hardware, including many Android devices; low EPSS and no KEV status indicate limited active threat but still requires patching for stability across the ecosystem.

How an attack unfolds

An attacker able to reach the display initialization path supplies an invalid phy pointer, bypassing the late sanity check and triggering the null dereference; the listed Android Kernel Remote Code Execution Vulnerability actor context suggests interest in kernel memory corruption primitives though public exploitation remains absent.

How to fix it

Apply the upstream fix by updating to Linux kernel commit 6d9f8ba28f3747ca0f910a363e46f1114856dbbe or any stable branch containing this commit; rebuild and deploy the patched kernel on affected systems.

How to confirm the fix worked

Verify the presence of the reordered sanity check before dev initialization in msm_dsi_phy_enable; confirm kernel version or git commit contains 6d9f8ba28f3747ca0f910a363e46f1114856dbbe and test display initialization paths.

Typical attack path

1. Obtain code execution or sufficient privileges to trigger display/DSI initialization
2. Pass a null or invalid phy structure to msm_dsi_phy_enable
3. Execute the function before the parameter check runs
4. Trigger kernel NULL pointer dereference resulting in panic or potential memory corruption

How to detect it

Review kernel logs and crash dumps for null pointer dereference faults referencing msm_dsi_phy_enable or dsi phy initialization; correlate with display subsystem activity on affected hardware.

What your security team should do

• Prioritize kernel updates on all Android and Linux systems using MSM DSI drivers within normal patch cycles given low EPSS
• Monitor for future KEV addition or EPSS increases
• Include the fixed commit in internal kernel build pipelines and SBOMs