PT-2025-26070 · Linux+3 · Linux Kernel+3

Published 2022-07-06 · Updated 2026-03-14 · CVE-2022-50144

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel's SoundWire driver has been resolved. The issue arises when the driver's bind and unbind operations are not properly handled, leading to potential kernel crashes. Specifically, the SoundWire probe stores a pointer from the driver ops into the 'slave' structure, which can cause kernel oopses when unbinding codec drivers. The vulnerability can be triggered by removing machine drivers and codec drivers in a specific sequence. Technical details about the issue include the invocation of driver callbacks after the driver's remove operation, which can result in kernel NULL pointer dereferences. For example, the sdw handle slave status function and the cdns update slave status work workqueue are involved in the vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-04565

CVE-2022-50144

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 583

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50144.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-50144 · Vendor Advisory
• https://git.kernel.org/stable/c/bd29c00edd0a5dac8b6e7332bb470cd50f92e893 · Patch
• https://git.kernel.org/stable/c/250b46505175889c6b5958c3829f610f52199f5f · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50144 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://git.kernel.org/stable/c/432b30f08ca3303d2ebb22352cb04c4b6cfefe65 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50144 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50144 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50144 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50144 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50144 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50144 · Vendor Advisory
• https://git.kernel.org/stable/c/8fd6b03646b9a9e16d1ec19bd724cd6bd78e0ea5 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory