CVE-2022-50229
BaseFortify
Publication date: 2025-06-18
Last updated on: 2025-11-19
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-416 | The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
This vulnerability can cause kernel crashes or instability due to use-after-free errors in the ALSA bcd2000 driver. It may lead to system reliability issues or potential exploitation if an attacker can trigger the bug, affecting system availability or security.
Can you explain this vulnerability to me?
This vulnerability is a use-after-free (UAF) bug in the Linux kernel's ALSA bcd2000 driver. Specifically, when the driver fails during the snd_card_register() probe process, it frees a resource ('bcd2k->midi_out_urb') before properly killing it, which can lead to accessing freed memory. This bug can cause kernel errors and instability.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking the system logs for specific KASAN (Kernel Address Sanitizer) use-after-free error messages related to the snd_bcd2000 driver. You can use the command 'dmesg | grep snd_bcd2000' or 'journalctl -k | grep snd_bcd2000' to look for logs similar to: '[ 50.727020] BUG: KASAN: use-after-free in bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000]'.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Linux kernel to a version where the ALSA bcd2000 driver has been fixed by adding usb_kill_urb() before usb_free_urb() in the probe error path. If an immediate update is not possible, avoid using the affected driver or hardware until the fix is applied.