CVE-2022-50704 — Expired Pointer Dereference in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: Fix use-after-free during usb config switch
In the process of switching USB config from rndis to other config,
if the hardware does not support the ->pullup callback, or the
hardware encounters a low probability fault, both of them may cause
the ->pullup callback to fail, which will then cause a system panic
(use after free).
The gadget drivers sometimes need to be unloaded regardless of the
hardware's behavior.
…
Affected Packages4 packages
▶CVEListV5linux/linux0a55187a1ec8c03d0619e7ce41d10fdc39cff036 — 30e926aa835ac2e6ad05822e4cb75833feb0d99f+3
🔴Vulnerability Details
3OSV▶
CVE-2022-50704: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free during usb config switch In the process of switchi↗2025-12-24
GHSA▶
GHSA-mj7r-48h2-hmpx: In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: Fix use-after-free during usb config switch
In the process of switc↗2025-12-24