CVE-2022-50735 — NULL Pointer Dereference in Linux
Severity
5.1MEDIUM
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: do not run mt76u_status_worker if the device is not running
Fix the following NULL pointer dereference avoiding to run
mt76u_status_worker thread if the device is not running yet.
KASAN: null-ptr-deref in range
[0x0000000000000000-0x0000000000000007]
CPU: 0 PID: 98 Comm: kworker/u2:2 Not tainted 5.14.0+ #78 Hardware
name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
rel-1.12.1-0-ga5cab58e9a3f-prebuilt.qemu.org 04/…
Affected Packages4 packages
▶CVEListV5linux/linux9daf27e62852d68c6ffc2c21090238ea51bb0a7f — 69346de0eb956fb92949b9473de4647d9c34a54f+4
🔴Vulnerability Details
3OSV▶
CVE-2022-50735: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76u_status_worker if the device is not running Fix the fo↗2025-12-24
GHSA▶
GHSA-5594-v4cp-2cvj: In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: do not run mt76u_status_worker if the device is not running
Fix the↗2025-12-24