cbcvebase.
CVE-2022-50229
published 2025-06-18

CVE-2022-50229: In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix a UAF bug on the error path of probing When the driver fails in…

PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.20%
10.6th percentile
In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix a UAF bug on the error path of probing When the driver fails in snd_card_register() at probe time, it will free the 'bcd2k->midi_out_urb' before killing it, which may cause a UAF bug. The following log can reveal it: [ 50.727020] BUG: KASAN: use-after-free in bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000] [ 50.727623] Read of size 8 at addr ffff88810fab0e88 by task swapper/4/0 [ 50.729530] Call Trace: [ 50.732899] bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000] Fix this by adding usb_kill_urb() before usb_free_urb().

Affected

23 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.0.2-1 (bookworm)linux 6.0.2-1 (bookworm)
linuxlinux——
linuxlinux>= b47a22290d581277be70e8a597824a4985d39e83 < a718eba7e458e2f40531be3c6b6a0028ca7fcacea718eba7e458e2f40531be3c6b6a0028ca7fcace
linuxlinux>= b47a22290d581277be70e8a597824a4985d39e83 < 4fc41f7ebb7efca282f1740ea934d16f33c1d1094fc41f7ebb7efca282f1740ea934d16f33c1d109
linuxlinux>= b47a22290d581277be70e8a597824a4985d39e83 < 5e7338f4dd92b2f8915a82abfa1dd3ad3464bea05e7338f4dd92b2f8915a82abfa1dd3ad3464bea0
linuxlinux>= b47a22290d581277be70e8a597824a4985d39e83 < 05e0bb8c3c4dde3e21b9c1cf9395afb04e8b24db05e0bb8c3c4dde3e21b9c1cf9395afb04e8b24db
linuxlinux>= b47a22290d581277be70e8a597824a4985d39e83 < 348620464a5c127399ac09b266f494f393661952348620464a5c127399ac09b266f494f393661952
linuxlinux>= b47a22290d581277be70e8a597824a4985d39e83 < 64ca7f50ad96c2c65ae390b954925a36eabe04aa64ca7f50ad96c2c65ae390b954925a36eabe04aa
linuxlinux>= b47a22290d581277be70e8a597824a4985d39e83 < 1d6a246cf97c380f2da76591f03019dd9c9599c31d6a246cf97c380f2da76591f03019dd9c9599c3
linuxlinux>= b47a22290d581277be70e8a597824a4985d39e83 < b0d4af0a4763ddc02344789ef2a281c494bc330db0d4af0a4763ddc02344789ef2a281c494bc330d
linuxlinux>= b47a22290d581277be70e8a597824a4985d39e83 < ffb2759df7efbc00187bfd9d1072434a13a54139ffb2759df7efbc00187bfd9d1072434a13a54139
linuxlinux_kernel>= 0 < 5.10.140-15.10.140-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 3.16 < 4.9.3264.9.326
linuxlinux_kernel>= 4.10 < 4.14.2914.14.291
linuxlinux_kernel>= 4.15 < 4.19.2564.19.256
linuxlinux_kernel>= 4.20 < 5.4.2115.4.211
linuxlinux_kernel>= 5.11 < 5.15.615.15.61
linuxlinux_kernel>= 5.16 < 5.18.185.18.18
linuxlinux_kernel>= 5.19 < 5.19.25.19.2
linuxlinux_kernel>= 5.5 < 5.10.1375.10.137

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.