PT-2025-25944 · Linux · Linux Kernel

Published 2025-06-18 · Updated 2026-04-20 · CVE-2022-50018

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the ALSA (Advanced Linux Sound Architecture) in the Linux kernel, specifically with the HDAudio bus driver. When the early probe of the HDAudio bus driver fails, for example, due to a missing firmware file, the snd hda codec shutdown() function manipulates an uninitialized codec->pcm list head, causing a page fault. The initialization of the HDAudio codec in ASoC is split into two steps: snd hda codec device init() and snd hda codec device new(). If the firmware fails to load during the PCI's deferred initialization, no platform components are registered, but the HDAudio codec enumeration is still done, calling snd hda codec device init(). During a platform reboot, snd hda codec shutdown() is called for every codec found on the HDAudio bus, causing an oops if any of them has not completed both initialization steps.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-50018

Affected Products

Linux Kernel

References · 9

• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50018 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50018 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50018 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50018 · Security Note
• https://ubuntu.com/security/CVE-2022-50018 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50018 · Vendor Advisory
• https://git.kernel.org/stable/c/e02db5c2c2ee15bc9a9ec8a86a614fd091e584dc · Note
• https://git.kernel.org/stable/c/980b3a8790b402e959a6d773b38b771019682be1 · Note