PT-2025-26144 · Linux+2 · Linux Kernel+2

Published 2025-06-18 · Updated 2025-07-28 · CVE-2022-50218

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the iio light driver isl29028. The issue arises from the use of the non-managed form of the register function in isl29028 remove(), which should be mirrored in the probe ordering. A general protection fault and null-ptr-deref were observed, indicating a potential issue with the driver's removal process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-05851

CVE-2022-50218

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 603

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50218.json · Exploit
• https://git.kernel.org/stable/c/06674fc7c003b9d0aa1d37fef7ab2c24802cc6ad · Patch
• https://osv.dev/vulnerability/CVE-2022-50218 · Vendor Advisory
• https://git.kernel.org/stable/c/359f3b150eab30805fe0e4e9d616887d7257a625 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50218 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02308-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50218 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50218 · Security Note
• https://git.kernel.org/stable/c/fb1888205c0782f287e5dd4ffff1f665332e868c · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50218 · Vendor Advisory
• https://git.kernel.org/stable/c/ed43fb20d3d1fca9d79db0d5faf4321a4dd58c23 · Patch
• https://git.kernel.org/stable/c/fac589fb764699a4bcd288f6656b8cd0408ea968 · Patch
• https://git.kernel.org/stable/c/ca63d5abf404d2934e2ac03545350de7bb8c8e96 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory