CVE-2022-50244 (GCVE-0-2022-50244)
Vulnerability from cvelistv5
Published
2025-09-15 14:02
Modified
2025-09-15 14:02
Severity ?
VLAI Severity ?
EPSS score ?
Summary
In the Linux kernel, the following vulnerability has been resolved:
cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
If device_register() fails in cxl_pci_afu|adapter(), the device
is not added, device_unregister() can not be called in the error
path, otherwise it will cause a null-ptr-deref because of removing
not added device.
As comment of device_register() says, it should use put_device() to give
up the reference in the error path. So split device_unregister() into
device_del() and put_device(), then goes to put dev when register fails.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| ▼ | Linux | Linux |
Version: f204e0b8cedd7da1dfcfd05ed6b7692737e24029 Version: f204e0b8cedd7da1dfcfd05ed6b7692737e24029 Version: f204e0b8cedd7da1dfcfd05ed6b7692737e24029 Version: f204e0b8cedd7da1dfcfd05ed6b7692737e24029 Version: f204e0b8cedd7da1dfcfd05ed6b7692737e24029 Version: f204e0b8cedd7da1dfcfd05ed6b7692737e24029 Version: f204e0b8cedd7da1dfcfd05ed6b7692737e24029 Version: f204e0b8cedd7da1dfcfd05ed6b7692737e24029 Version: f204e0b8cedd7da1dfcfd05ed6b7692737e24029 |
||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/misc/cxl/pci.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "82e68432668ae75b4c814d160f6987ecb0681273",
"status": "affected",
"version": "f204e0b8cedd7da1dfcfd05ed6b7692737e24029",
"versionType": "git"
},
{
"lessThan": "82e5481428faf11c79b9c094dd24a1849bbf64ac",
"status": "affected",
"version": "f204e0b8cedd7da1dfcfd05ed6b7692737e24029",
"versionType": "git"
},
{
"lessThan": "c4b2e35df919d99bbbed033c2fa0b607f9f463b5",
"status": "affected",
"version": "f204e0b8cedd7da1dfcfd05ed6b7692737e24029",
"versionType": "git"
},
{
"lessThan": "361412dae1690d4b5df6f92fc943cdc773c95cbc",
"status": "affected",
"version": "f204e0b8cedd7da1dfcfd05ed6b7692737e24029",
"versionType": "git"
},
{
"lessThan": "0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec",
"status": "affected",
"version": "f204e0b8cedd7da1dfcfd05ed6b7692737e24029",
"versionType": "git"
},
{
"lessThan": "22511eefa61db26e12c97dd7ada3071dbdfcb004",
"status": "affected",
"version": "f204e0b8cedd7da1dfcfd05ed6b7692737e24029",
"versionType": "git"
},
{
"lessThan": "139abd4c626a6f7ce02789ed5f73aa2256e0542b",
"status": "affected",
"version": "f204e0b8cedd7da1dfcfd05ed6b7692737e24029",
"versionType": "git"
},
{
"lessThan": "2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339",
"status": "affected",
"version": "f204e0b8cedd7da1dfcfd05ed6b7692737e24029",
"versionType": "git"
},
{
"lessThan": "02cd3032b154fa02fdf90e7467abaeed889330b2",
"status": "affected",
"version": "f204e0b8cedd7da1dfcfd05ed6b7692737e24029",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/misc/cxl/pci.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "3.18"
},
{
"lessThan": "3.18",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.9.*",
"status": "unaffected",
"version": "4.9.337",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.14.*",
"status": "unaffected",
"version": "4.14.303",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"version": "4.19.270",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"version": "5.4.229",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.163",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.86",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.0.*",
"status": "unaffected",
"version": "6.0.16",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "6.2",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.9.337",
"versionStartIncluding": "3.18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.303",
"versionStartIncluding": "3.18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.19.270",
"versionStartIncluding": "3.18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.4.229",
"versionStartIncluding": "3.18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.163",
"versionStartIncluding": "3.18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.86",
"versionStartIncluding": "3.18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.0.16",
"versionStartIncluding": "3.18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.2",
"versionStartIncluding": "3.18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.2",
"versionStartIncluding": "3.18",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()\n\nIf device_register() fails in cxl_pci_afu|adapter(), the device\nis not added, device_unregister() can not be called in the error\npath, otherwise it will cause a null-ptr-deref because of removing\nnot added device.\n\nAs comment of device_register() says, it should use put_device() to give\nup the reference in the error path. So split device_unregister() into\ndevice_del() and put_device(), then goes to put dev when register fails."
}
],
"providerMetadata": {
"dateUpdated": "2025-09-15T14:02:01.364Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/82e68432668ae75b4c814d160f6987ecb0681273"
},
{
"url": "https://git.kernel.org/stable/c/82e5481428faf11c79b9c094dd24a1849bbf64ac"
},
{
"url": "https://git.kernel.org/stable/c/c4b2e35df919d99bbbed033c2fa0b607f9f463b5"
},
{
"url": "https://git.kernel.org/stable/c/361412dae1690d4b5df6f92fc943cdc773c95cbc"
},
{
"url": "https://git.kernel.org/stable/c/0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec"
},
{
"url": "https://git.kernel.org/stable/c/22511eefa61db26e12c97dd7ada3071dbdfcb004"
},
{
"url": "https://git.kernel.org/stable/c/139abd4c626a6f7ce02789ed5f73aa2256e0542b"
},
{
"url": "https://git.kernel.org/stable/c/2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339"
},
{
"url": "https://git.kernel.org/stable/c/02cd3032b154fa02fdf90e7467abaeed889330b2"
}
],
"title": "cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2022-50244",
"datePublished": "2025-09-15T14:02:01.364Z",
"dateReserved": "2025-09-15T13:58:00.971Z",
"dateUpdated": "2025-09-15T14:02:01.364Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2022-50244\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-15T14:15:34.763\",\"lastModified\":\"2025-09-15T15:21:42.937\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ncxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()\\n\\nIf device_register() fails in cxl_pci_afu|adapter(), the device\\nis not added, device_unregister() can not be called in the error\\npath, otherwise it will cause a null-ptr-deref because of removing\\nnot added device.\\n\\nAs comment of device_register() says, it should use put_device() to give\\nup the reference in the error path. So split device_unregister() into\\ndevice_del() and put_device(), then goes to put dev when register fails.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/02cd3032b154fa02fdf90e7467abaeed889330b2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/139abd4c626a6f7ce02789ed5f73aa2256e0542b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/22511eefa61db26e12c97dd7ada3071dbdfcb004\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/361412dae1690d4b5df6f92fc943cdc773c95cbc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/82e5481428faf11c79b9c094dd24a1849bbf64ac\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/82e68432668ae75b4c814d160f6987ecb0681273\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c4b2e35df919d99bbbed033c2fa0b607f9f463b5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…