cbcvebase.
CVE-2022-50538
published 2025-10-07

CVE-2022-50538: In the Linux kernel, the following vulnerability has been resolved: vme: Fix error not catched in fake_init() In fake_init(), __root_device_register() is…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved: vme: Fix error not catched in fake_init() In fake_init(), __root_device_register() is possible to fail but it's ignored, which can cause unregistering vme_root fail when exit. general protection fault, probably for non-canonical address 0xdffffc000000008c KASAN: null-ptr-deref in range [0x0000000000000460-0x0000000000000467] RIP: 0010:root_device_unregister+0x26/0x60 Call Trace: __x64_sys_delete_module+0x34f/0x540 do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd Return error when __root_device_register() fails.

Affected

23 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.4-1 (bookworm)linux 6.1.4-1 (bookworm)
linuxlinux
linuxlinux>= 658bcdae9c6755806e66b33e29d56b33a3ff421a < e831fdd60e5863ee03173baf5a0f7c5450b44381e831fdd60e5863ee03173baf5a0f7c5450b44381
linuxlinux>= 658bcdae9c6755806e66b33e29d56b33a3ff421a < 69b43937f14bdc3594f57f1a507a14f3d118713669b43937f14bdc3594f57f1a507a14f3d1187136
linuxlinux>= 658bcdae9c6755806e66b33e29d56b33a3ff421a < 09be0e7ac5f9374b6f8de72c89ed67129af71f6509be0e7ac5f9374b6f8de72c89ed67129af71f65
linuxlinux>= 658bcdae9c6755806e66b33e29d56b33a3ff421a < f3f65c4177846c483bf009f8c512ab04b3c62466f3f65c4177846c483bf009f8c512ab04b3c62466
linuxlinux>= 658bcdae9c6755806e66b33e29d56b33a3ff421a < 37d3de40c1ffb6a5e626bf46ff5ef5766c824e2c37d3de40c1ffb6a5e626bf46ff5ef5766c824e2c
linuxlinux>= 658bcdae9c6755806e66b33e29d56b33a3ff421a < 4bc217b25ea81034fad8e33fd33e4659f086421d4bc217b25ea81034fad8e33fd33e4659f086421d
linuxlinux>= 658bcdae9c6755806e66b33e29d56b33a3ff421a < a2a93546d414c7fe4862b87183fb737d1300d9d2a2a93546d414c7fe4862b87183fb737d1300d9d2
linuxlinux>= 658bcdae9c6755806e66b33e29d56b33a3ff421a < 60ff9bd4ffc87bace581e235a6728f5ac8e5071f60ff9bd4ffc87bace581e235a6728f5ac8e5071f
linuxlinux>= 658bcdae9c6755806e66b33e29d56b33a3ff421a < 7bef797d707f1744f71156b21d41e3b8c946631f7bef797d707f1744f71156b21d41e3b8c946631f
linuxlinux_kernel>= 0 < 5.10.178-15.10.178-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 4.10 < 4.14.3034.14.303
linuxlinux_kernel>= 4.15 < 4.19.2704.19.270
linuxlinux_kernel>= 4.20 < 5.4.2295.4.229
linuxlinux_kernel>= 4.9 < 4.9.3374.9.337
linuxlinux_kernel>= 5.11 < 5.15.865.15.86
linuxlinux_kernel>= 5.16 < 6.0.166.0.16
linuxlinux_kernel>= 5.5 < 5.10.1635.10.163
linuxlinux_kernel>= 6.1 < 6.1.26.1.2

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.