CVE-2022-50468

published 2025-10-01

CVE-2022-50468: In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() The…

Priority P4 18 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init()

The following WARNING message was given when rmmod cros_usbpd_notify:

Unexpected driver unregister!
WARNING: CPU: 0 PID: 253 at drivers/base/driver.c:270 driver_unregister+0x8a/0xb0
Modules linked in: cros_usbpd_notify(-)
CPU: 0 PID: 253 Comm: rmmod Not tainted 6.1.0-rc3 #24
...
Call Trace:

cros_usbpd_notify_exit+0x11/0x1e [cros_usbpd_notify]
__x64_sys_delete_module+0x3c7/0x570
? __ia32_sys_delete_module+0x570/0x570
? lock_is_held_type+0xe3/0x140
? syscall_enter_from_user_mode+0x17/0x50
? rcu_read_lock_sched_held+0xa0/0xd0
? syscall_enter_from_user_mode+0x1c/0x50
do_syscall_64+0x37/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f333fe9b1b7

The reason is that the cros_usbpd_notify_init() does not check the return
value of platform_driver_register(), and the cros_usbpd_notify can
install successfully even if platform_driver_register() failed.

Fix by checking the return value of platform_driver_register() and
unregister cros_usbpd_notify_plat_driver when it failed.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.4-1 (bookworm)	linux 6.1.4-1 (bookworm)
linux	linux	—	—
linux	linux	>= ec2daf6e33f9f9113ba085b6ff88592907b6f1ce < 5c0cacdd354987f8f5348d16908716f154047890	5c0cacdd354987f8f5348d16908716f154047890
linux	linux	>= ec2daf6e33f9f9113ba085b6ff88592907b6f1ce < cab345f9d51943898e406275f9607c145adb1877	cab345f9d51943898e406275f9607c145adb1877
linux	linux	>= ec2daf6e33f9f9113ba085b6ff88592907b6f1ce < 7b6ee54995739202b4a0cc01b7e9269f761c573d	7b6ee54995739202b4a0cc01b7e9269f761c573d
linux	linux	>= ec2daf6e33f9f9113ba085b6ff88592907b6f1ce < 751f12696d797e785d2611099fe9f0569d47556e	751f12696d797e785d2611099fe9f0569d47556e
linux	linux	>= ec2daf6e33f9f9113ba085b6ff88592907b6f1ce < 5a2d96623670155d94aca72c320c0ac27bdc6bd2	5a2d96623670155d94aca72c320c0ac27bdc6bd2
linux	linux_kernel	>= 0 < 5.10.178-1	5.10.178-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 5.11 < 5.15.86	5.15.86
linux	linux_kernel	>= 5.16 < 6.0.16	6.0.16
linux	linux_kernel	>= 5.7 < 5.10.163	5.10.163
linux	linux_kernel	>= 6.1 < 6.1.2	6.1.2

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-252