CVE-2022-50733
BaseFortify
Publication date: 2025-12-24
Last updated on: 2025-12-29
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is in the Linux kernel's usb idmouse driver. Specifically, in the idmouse_create_image function, if a certain command (ftip_command) fails, the code jumps to a reset label without properly initializing some data in the bulk_in_buffer array. This leads to an uninitialized value being dereferenced when checking for a valid image, which is a programming error. The issue was found using Kernel Memory Sanitizer (KMSAN) during kernel compilation testing.
How can this vulnerability impact me? :
The vulnerability causes an uninitialized value to be dereferenced in kernel code, which can lead to undefined behavior such as kernel crashes or instability. However, since it was detected by KMSAN during compilation testing, it primarily affects kernel reliability and stability rather than direct security compromise. There is no information about exploitation or impact beyond this.