In the Linux kernel, the following vulnerability has been resolved: phy: freescale: imx8qm-hsio: fix NULL pointer dereference During the probe the refclk_pad pointer is set to NULL if the 'fsl,refclk-pad-mode' property is not defined in the devicetree node. But in imx_hsio_configure_clk_pad() this pointer is unconditionally used which could result in a NULL pointer dereference. So check the pointer before to use it.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - phy: freescale: imx8qm-hsio: fix NULL pointer dereference During the probe the refclk_pad pointer is set     to NULL if the 'fsl,refclk-pad-mode' property is not defined in the devicetree node. But in     imx_hsio_configure_clk_pad() this pointer is unconditionally used which could result in a NULL pointer     dereference. So check the pointer before to use it. (CVE-2026-45874)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
335080	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)	Nessus	SuSE Local Security Checks	Local	high
318464	Linux Distros Unpatched Vulnerability : CVE-2026-45874	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-45874

medium

Tenable Plugins

high

medium