PT-2025-26058 · Linux+3 · Linux Kernel+3

Publicado 2022-07-27 · Atualizado 2025-07-28 · CVE-2022-50132

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the cdns3 gadget ep dequeue() and cdns3 gadget ep enable() functions, where the assignment of priv ep is incorrect. If ep is NULL, the result of ep to cdns3 ep(ep) is an invalid pointer, and its dereference with priv ep->cdns3 dev may cause a panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2026-04572

CVE-2022-50132

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Produtos afetados

Astra Linux

Linux Kernel

Red Hat

Suse

Referências · 596

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50132.json · Exploit
• https://bugzilla.suse.com/1243627 · Nota
• https://suse.com/security/cve/CVE-2022-49937 · Nota
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.18 · Nota
• https://suse.com/security/cve/CVE-2022-50221 · Nota
• https://bugzilla.suse.com/1245122 · Nota
• https://suse.com/security/cve/CVE-2023-53048 · Nota
• https://suse.com/security/cve/CVE-2022-50156 · Nota
• https://bugzilla.suse.com/1244958 · Nota
• https://suse.com/security/cve/CVE-2024-53057 · Nota
• https://suse.com/security/cve/CVE-2025-37948 · Nota
• https://suse.com/security/cve/CVE-2022-50199 · Nota
• https://suse.com/security/cve/CVE-2022-50181 · Nota
• https://suse.com/security/cve/CVE-2022-50220 · Nota
• https://bugzilla.suse.com/1245060 · Nota