CVE-2022-50359
BaseFortify
Publication date: 2025-09-17
Last updated on: 2025-12-09
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | to 4.9.331 (exc) |
| linux | linux_kernel | From 4.10 (inc) to 4.14.296 (exc) |
| linux | linux_kernel | From 4.15 (inc) to 4.19.262 (exc) |
| linux | linux_kernel | From 4.20 (inc) to 5.4.220 (exc) |
| linux | linux_kernel | From 5.5 (inc) to 5.10.150 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.75 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 5.19.17 (exc) |
| linux | linux_kernel | From 6.0 (inc) to 6.0.3 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a null pointer dereference bug in the Linux kernel's cx88 media driver. When the driver calls the function cx88_risc_buffer() to prepare a buffer, the call may fail and return an empty buffer. Later, when buffer_queue() tries to use this buffer without checking if it is valid, it dereferences a null pointer, causing a kernel crash or general protection fault.
How can this vulnerability impact me? :
This vulnerability can cause the Linux kernel to crash or experience a general protection fault, leading to system instability or denial of service. It affects systems using the cx88 media driver, potentially interrupting media-related operations or causing unexpected reboots.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring the system logs for specific kernel error messages indicating a null pointer dereference related to the cx88 driver. Look for log entries similar to: "general protection fault, probably for non-canonical address", "KASAN: null-ptr-deref", and stack traces involving buffer_queue and cx88_risc_buffer. You can use the command 'dmesg | grep -iE "general protection fault|KASAN|buffer_queue|cx88"' to search the kernel ring buffer for these signs.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation involves updating the Linux kernel to a version where the cx88 driver has been patched to properly check the return value of cx88_risc_buffer(), preventing the null pointer dereference. Until an update is applied, avoid using the cx88 driver or the affected media functionality to prevent triggering the bug.