CVE-2022-50875
published 2025-12-30CVE-2022-50875: In the Linux kernel, the following vulnerability has been resolved: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and…
PriorityP419low4.7
EPSS
0.18%
7.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will
be NULL, and strcmp() will cause null pointer dereference.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2fe0e8769df9fed5098daea7db933bc414c329d7 < 9ec5781879b4535ad59b5354b385825378e45618 | 9ec5781879b4535ad59b5354b385825378e45618 |
| linux | linux | >= 2fe0e8769df9fed5098daea7db933bc414c329d7 < 2b4af99b44861646013821019dd13a4ac48c0219 | 2b4af99b44861646013821019dd13a4ac48c0219 |
| linux | linux | >= 2fe0e8769df9fed5098daea7db933bc414c329d7 < ce1b3a41e7964cb8dd56a702a95dd90ad27f51cd | ce1b3a41e7964cb8dd56a702a95dd90ad27f51cd |
| linux | linux | >= 2fe0e8769df9fed5098daea7db933bc414c329d7 < ab5bb7bbacf531de8e32912cc2e21f906113cee8 | ab5bb7bbacf531de8e32912cc2e21f906113cee8 |
| linux | linux | >= 2fe0e8769df9fed5098daea7db933bc414c329d7 < 71d88c7453ec3d2ceff98e18ce4d6354abd3b5b6 | 71d88c7453ec3d2ceff98e18ce4d6354abd3b5b6 |
| linux | linux | >= 2fe0e8769df9fed5098daea7db933bc414c329d7 < ee9d7a0e754568180a2f8ebc4aad226278a9116f | ee9d7a0e754568180a2f8ebc4aad226278a9116f |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 5.0.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
vendor_redhat·2025-12-30·CVSS 4.7
CVE-2022-50875 [LOW] CWE-476 kernel: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
kernel: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
In the Linux kernel, the following vulnerability has been resolved:
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will
be NULL, and strcmp() will cause null pointer dereference.
A NULL pointer dereference was found in the Device Tree overlay code. When memory allocation fails in kasprintf(), the resulting NULL pointer is passed to strcmp() without validation, causing a kernel crash.
Statement: Triggering this requires memory pressure sufficient to cause kmalloc() failures during device tree overlay operations. This is a low-probability scenario in normal system o
Debian
CVE-2022-50875: linux - In the Linux kernel, the following vulnerability has been resolved: of: overlay...
vendor_debian·2022
CVE-2022-50875 CVE-2022-50875: linux - In the Linux kernel, the following vulnerability has been resolved: of: overlay...
In the Linux kernel, the following vulnerability has been resolved: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will be NULL, and strcmp() will cause null pointer dereference.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
GHSA
GHSA-7394-w6hr-wqhw: In the Linux kernel, the following vulnerability has been resolved:
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and fin
ghsa_unreviewed·2025-12-30
CVE-2022-50875 GHSA-7394-w6hr-wqhw: In the Linux kernel, the following vulnerability has been resolved:
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and fin
In the Linux kernel, the following vulnerability has been resolved:
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will
be NULL, and strcmp() will cause null pointer dereference.
OSV
CVE-2022-50875: In the Linux kernel, the following vulnerability has been resolved: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find
osv·2025-12-30
CVE-2022-50875 CVE-2022-50875: In the Linux kernel, the following vulnerability has been resolved: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find
In the Linux kernel, the following vulnerability has been resolved: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will be NULL, and strcmp() will cause null pointer dereference.
OSV
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
osv·2025-12-30
CVE-2022-50875 of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
In the Linux kernel, the following vulnerability has been resolved:
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will
be NULL, and strcmp() will cause null pointer dereference.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50875 kernel: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
bugzilla·2025-12-30
CVE-2022-50875 [LOW] CVE-2022-50875 kernel: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
CVE-2022-50875 kernel: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
In the Linux kernel, the following vulnerability has been resolved:
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will
be NULL, and strcmp() will cause null pointer dereference.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123023-CVE-2022-50875-4def@gregkh/T
Wiz
CVE-2022-50875 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50875 CVE-2022-50875 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50875 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will
be NULL, and strcmp() will cause null pointer dereference.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 15
Exploitation Probability (EPSS) N/A
Affected packages and libraries
kernel-zfcpdump-devel
kernel-zfcpdump-modules-internal
Sources
NVD
Debian 11, 12, 13, 14 Has Fix
https://git.kernel.org/stable/c/2b4af99b44861646013821019dd13a4ac48c0219https://git.kernel.org/stable/c/71d88c7453ec3d2ceff98e18ce4d6354abd3b5b6https://git.kernel.org/stable/c/9ec5781879b4535ad59b5354b385825378e45618https://git.kernel.org/stable/c/ab5bb7bbacf531de8e32912cc2e21f906113cee8https://git.kernel.org/stable/c/ce1b3a41e7964cb8dd56a702a95dd90ad27f51cdhttps://git.kernel.org/stable/c/ee9d7a0e754568180a2f8ebc4aad226278a9116f
2025-12-30
Published