CVE-2022-50481NULL Pointer Dereference in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() If device_register() fails in cxl_register_afu|adapter(), the device is not added, device_unregister() can not be called in the error path, otherwise it will cause a null-ptr-deref because of removing not added device. As comment of device_register() says, it should use put_device() to give up the reference in the error path. So split device_unregister() into de

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel4.64.9.337+7
Debianlinux/linux_kernel< 5.10.178-1+3
CVEListV5linux/linux14baf4d9c739e6e69150512d2eb23c71fffcc19296fba6fb95bdede80583c262ac185da09661f264+9
debiandebian/linux< linux 6.1.4-1 (bookworm)

Patches

🔴Vulnerability Details

2
OSV
CVE-2022-50481: In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() If device_registe2025-10-04
GHSA
GHSA-2fm3-57pq-4jp3: In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() If device_regis2025-10-04

📋Vendor Advisories

2
Red Hat
kernel: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()2025-10-04
Debian
CVE-2022-50481: linux - In the Linux kernel, the following vulnerability has been resolved: cxl: fix po...2022