CVE-2022-50733
published 2025-12-24CVE-2022-50733: In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fix an uninit-value in idmouse_open In idmouse_create_image, if any…
PriorityP422low5.5
EPSS
0.25%
16.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if any ftip_command fails, it will
go to the reset label. However, this leads to the data in
bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check
for valid image incurs an uninitialized dereference.
Fix this by moving the check before reset label since this
check only be valid if the data after bulk_in_buffer[HEADER]
has concrete data.
Note that this is found by KMSAN, so only kernel compilation
is tested.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 4244f72436ab77c3c29a6447af81734ab3925d85 < b3304a6df957cc89a0590cb505388d659bf3db4c | b3304a6df957cc89a0590cb505388d659bf3db4c |
| linux | linux | >= 4244f72436ab77c3c29a6447af81734ab3925d85 < 7dad42032f68718259590b0cc7654e9a95ff9762 | 7dad42032f68718259590b0cc7654e9a95ff9762 |
| linux | linux | >= 4244f72436ab77c3c29a6447af81734ab3925d85 < f589b667567fde4f81d6e6c40f42b9f2224690ea | f589b667567fde4f81d6e6c40f42b9f2224690ea |
| linux | linux | >= 4244f72436ab77c3c29a6447af81734ab3925d85 < 1eae30c0113dde7522088231584d62415011a035 | 1eae30c0113dde7522088231584d62415011a035 |
| linux | linux | >= 4244f72436ab77c3c29a6447af81734ab3925d85 < b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54 | b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54 |
| linux | linux | >= 4244f72436ab77c3c29a6447af81734ab3925d85 < 20b8c456df584ebb2387dc23d40ebe4ff334417c | 20b8c456df584ebb2387dc23d40ebe4ff334417c |
| linux | linux | >= 4244f72436ab77c3c29a6447af81734ab3925d85 < 6163a5ae097bc78fa26c243fb384537e25610fd7 | 6163a5ae097bc78fa26c243fb384537e25610fd7 |
| linux | linux | >= 4244f72436ab77c3c29a6447af81734ab3925d85 < adad163d1cff248a5df9f7cec50158e6ca89f33b | adad163d1cff248a5df9f7cec50158e6ca89f33b |
| linux | linux | >= 4244f72436ab77c3c29a6447af81734ab3925d85 < bce2b0539933e485d22d6f6f076c0fcd6f185c4c | bce2b0539933e485d22d6f6f076c0fcd6f185c4c |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 2.6.13 < 4.9.331 | 4.9.331 |
| linux | linux_kernel | >= 4.10.0 < 4.14.296 | 4.14.296 |
| linux | linux_kernel | >= 4.15.0 < 4.19.262 | 4.19.262 |
| linux | linux_kernel | >= 4.20.0 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.11.0 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16.0 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.20.0 < 6.0.3 | 6.0.3 |
| linux | linux_kernel | >= 5.5.0 < 5.10.150 | 5.10.150 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.0.2 usb idmouse_open uninitialized pointer (Nessus ID 279923 / WID-SEC-2025-2929)
vuldb·2026-04-21
CVE-2022-50733 [CRITICAL] Linux Kernel up to 6.0.2 usb idmouse_open uninitialized pointer (Nessus ID 279923 / WID-SEC-2025-2929)
A vulnerability classified as critical was found in Linux Kernel up to 6.0.2. This affects the function idmouse_open of the component usb. Such manipulation leads to uninitialized pointer.
This vulnerability is listed as CVE-2022-50733. The attack must be carried out from within the local network. There is no available exploit.
Upgrading the affected component is advised.
OSV
usb: idmouse: fix an uninit-value in idmouse_open
osv·2025-12-24
CVE-2022-50733 usb: idmouse: fix an uninit-value in idmouse_open
usb: idmouse: fix an uninit-value in idmouse_open
In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if any ftip_command fails, it will
go to the reset label. However, this leads to the data in
bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check
for valid image incurs an uninitialized dereference.
Fix this by moving the check before reset label since this
check only be valid if the data after bulk_in_buffer[HEADER]
has concrete data.
Note that this is found by KMSAN, so only kernel compilation
is tested.
GHSA
GHSA-3qmv-4mq3-fcr8: In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if an
ghsa_unreviewed·2025-12-24
CVE-2022-50733 GHSA-3qmv-4mq3-fcr8: In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if an
In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if any ftip_command fails, it will
go to the reset label. However, this leads to the data in
bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check
for valid image incurs an uninitialized dereference.
Fix this by moving the check before reset label since this
check only be valid if the data after bulk_in_buffer[HEADER]
has concrete data.
Note that this is found by KMSAN, so only kernel compilation
is tested.
OSV
CVE-2022-50733: In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fix an uninit-value in idmouse_open In idmouse_create_image, if any
osv·2025-12-24
CVE-2022-50733 CVE-2022-50733: In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fix an uninit-value in idmouse_open In idmouse_create_image, if any
In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fix an uninit-value in idmouse_open In idmouse_create_image, if any ftip_command fails, it will go to the reset label. However, this leads to the data in bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check for valid image incurs an uninitialized dereference. Fix this by moving the check before reset label since this check only be valid if the data after bulk_in_buffer[HEADER] has concrete data. Note that this is found by KMSAN, so only kernel compilation is tested.
Red Hat
kernel: usb: idmouse: fix an uninit-value in idmouse_open
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2022-50733 [LOW] CWE-824 kernel: usb: idmouse: fix an uninit-value in idmouse_open
kernel: usb: idmouse: fix an uninit-value in idmouse_open
In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if any ftip_command fails, it will
go to the reset label. However, this leads to the data in
bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check
for valid image incurs an uninitialized dereference.
Fix this by moving the check before reset label since this
check only be valid if the data after bulk_in_buffer[HEADER]
has concrete data.
Note that this is found by KMSAN, so only kernel compilation
is tested.
A use of uninitialized memory was found in the Linux kernel's idmouse USB fingerprint reader driver. In idmouse_create_image(), when any ftip_command() fails, control jumps to the
Debian
CVE-2022-50733: linux - In the Linux kernel, the following vulnerability has been resolved: usb: idmous...
vendor_debian·2022
CVE-2022-50733 CVE-2022-50733: linux - In the Linux kernel, the following vulnerability has been resolved: usb: idmous...
In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fix an uninit-value in idmouse_open In idmouse_create_image, if any ftip_command fails, it will go to the reset label. However, this leads to the data in bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check for valid image incurs an uninitialized dereference. Fix this by moving the check before reset label since this check only be valid if the data after bulk_in_buffer[HEADER] has concrete data. Note that this is found by KMSAN, so only kernel compilation is tested.
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50733 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50733 CVE-2022-50733 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50733 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if any ftip_command fails, it will
go to the reset label. However, this leads to the data in
bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check
for valid image incurs an uninitialized dereference.
Fix this by moving the check before reset label since this
check only be valid if the data after bulk_in_buffer[HEADER]
has concrete data.
Note that this is found by KMSAN, so only kernel compilation
is tested.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA
Bugzilla
CVE-2022-50733 kernel: usb: idmouse: fix an uninit-value in idmouse_open
bugzilla·2025-12-24
CVE-2022-50733 [LOW] CVE-2022-50733 kernel: usb: idmouse: fix an uninit-value in idmouse_open
CVE-2022-50733 kernel: usb: idmouse: fix an uninit-value in idmouse_open
In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if any ftip_command fails, it will
go to the reset label. However, this leads to the data in
bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check
for valid image incurs an uninitialized dereference.
Fix this by moving the check before reset label since this
check only be valid if the data after bulk_in_buffer[HEADER]
has concrete data.
Note that this is found by KMSAN, so only kernel compilation
is tested.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122421-CVE-2022-50733-a587@gregkh/T
https://git.kernel.org/stable/c/1eae30c0113dde7522088231584d62415011a035https://git.kernel.org/stable/c/20b8c456df584ebb2387dc23d40ebe4ff334417chttps://git.kernel.org/stable/c/6163a5ae097bc78fa26c243fb384537e25610fd7https://git.kernel.org/stable/c/7dad42032f68718259590b0cc7654e9a95ff9762https://git.kernel.org/stable/c/adad163d1cff248a5df9f7cec50158e6ca89f33bhttps://git.kernel.org/stable/c/b3304a6df957cc89a0590cb505388d659bf3db4chttps://git.kernel.org/stable/c/b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54https://git.kernel.org/stable/c/bce2b0539933e485d22d6f6f076c0fcd6f185c4chttps://git.kernel.org/stable/c/f589b667567fde4f81d6e6c40f42b9f2224690ea
2025-12-24
Published