CVE-2022-50710NULL Pointer Dereference in Linux

Severity
5.8MEDIUM
No vector
EPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 24

Description

In the Linux kernel, the following vulnerability has been resolved: ice: set tx_tstamps when creating new Tx rings via ethtool When the user changes the number of queues via ethtool, the driver allocates new rings. This allocation did not initialize tx_tstamps. This results in the tx_tstamps field being zero (due to kcalloc allocation), and would result in a NULL pointer dereference when attempting a transmit timestamp on the new ring.

Affected Packages4 packages

Linuxlinux/linux_kernel5.14.05.15.75+2
Debianlinux/linux_kernel< 6.0.3-1+2
CVEListV5linux/linuxea9b847cda647b9849b0b9fa0447e876a1ac62e1624f03a027f2b18647cc4f1a7a81920a1e4e0201+4
debiandebian/linux< linux 6.0.3-1 (bookworm)

🔴Vulnerability Details

3
GHSA
GHSA-r3vp-q59j-x732: In the Linux kernel, the following vulnerability has been resolved: ice: set tx_tstamps when creating new Tx rings via ethtool When the user changes2025-12-24
OSV
CVE-2022-50710: In the Linux kernel, the following vulnerability has been resolved: ice: set tx_tstamps when creating new Tx rings via ethtool When the user changes t2025-12-24
OSV
ice: set tx_tstamps when creating new Tx rings via ethtool2025-12-24

📋Vendor Advisories

2
Red Hat
kernel: Linux kernel: Denial of Service in ice driver via uninitialized transmit rings2025-12-24
Debian
CVE-2022-50710: linux - In the Linux kernel, the following vulnerability has been resolved: ice: set tx...2022

🕵️Threat Intelligence

1
Wiz
CVE-2022-50710 Impact, Exploitability, and Mitigation Steps | Wiz