PT-2025-26058 · Linux+3 · Linux Kernel+3

Published 2022-07-27 · Updated 2025-07-28 · CVE-2022-50132

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the cdns3 gadget ep dequeue() and cdns3 gadget ep enable() functions, where the assignment of priv ep is incorrect. If ep is NULL, the result of ep to cdns3 ep(ep) is an invalid pointer, and its dereference with priv ep->cdns3 dev may cause a panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-04572

CVE-2022-50132

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 596

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50132.json · Exploit
• https://git.kernel.org/stable/c/c3ffc9c4ca44bfe9562166793d133e1fb0630ea6 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50132 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50132 · Security Note
• https://git.kernel.org/stable/c/bfa0201468587072454dba7933e4a4a7be44467a · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50132 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50132 · Security Note
• https://git.kernel.org/stable/c/d342203df9f2d0851b4acd9ed577d73d10eade77 · Patch
• https://git.kernel.org/stable/c/7af83bb516d7aa4f96835288e4aeda21d7aa2a17 · Patch
• https://ubuntu.com/security/CVE-2022-50132 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04572 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50132 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://git.kernel.org/stable/c/eb82c0382285ee17a9966aaab27b8becb08eb1ac · Patch