CVE-2022-50447 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer DereferenceCWE-94 — Code InjectionCWE-95 — Eval InjectionCWE-77 — Command Injection8 documents7 sources
Severity
5.5MEDIUMNVD
GHSA9.8
EPSS
0.0%
top 97.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelPython Pillow+1 more
Timeline
PublishedOct 1

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync When attempting to connect multiple ISO sockets without using DEFER_SETUP may result in the following crash: BUG: KASAN: null-ptr-deref in hci_create_cis_sync+0x18b/0x2b0 Read of size 2 at addr 0000000000000036 by task kworker/u3:1/50 CPU: 0 PID: 50 Comm: kworker/u3:1 Not tainted 6.0.0-rc7-02243-gb84a13ff4eda #4373 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶NVDlinux/linux_kernel6.0 — 6.0.16+1
▶Debianlinux/linux_kernel< 6.1.4-1+2
▶CVEListV5linux/linux26afbd826ee326e63a334c37fd45e82e50a615ec — a190cd9dc62d6ebeb679c1abe9dda4162dfefc84+3
▶debiandebian/linux< linux 6.1.4-1 (bookworm)
▶PyPIpython/pillow< 10.2.0

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-x767-vgjw-4wwh: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync When attempting to connect↗2025-10-01
▶
OSV
CVE-2022-50447: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync When attempting to connect m↗2025-10-01
▶
GHSA
Arbitrary Code Execution in Pillow↗2024-01-19
▶

📋Vendor Advisories

3
Red Hat
kernel: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync↗2025-10-01
▶
Red Hat
pillow: Arbitrary Code Execution via the environment parameter↗2024-01-19
▶
Debian
CVE-2022-50447: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ...↗2022
▶
CVE-2022-50447 — NULL Pointer Dereference in Linux | cvebase