PT-2025-37510 · Linux+1 · Linux Kernel+1

Published 2022-01-01 · Updated 2026-04-20 · CVE-2022-50256

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's DRM subsystem related to the handling of DRM bridges within the meson driver. Specifically, DRM bridges created by meson encoder hdmi init and meson encoder cvbs init were not properly removed during module unloading, leading to dangling references to freed memory. Subsequent loading of the driver modules could then result in accessing this freed memory, as detected by KASAN (Kernel Address Sanitizer). This can lead to system instability or potential exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

AZL-70765

CVE-2022-50256

Affected Products

Debian

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50256.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50256 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50256 · Vendor Advisory
• https://git.kernel.org/stable/c/09847723c12fc2753749cec3939a02ee92dac468 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50256 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50256 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50256 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-70765 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50256 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50256 · Vendor Advisory
• https://git.kernel.org/stable/c/fc1fd114dde3d2623ac37676df3d74ffeedb0da8 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50256 · Security Note
• https://ubuntu.com/security/CVE-2022-50256 · Vendor Advisory
• https://git.kernel.org/stable/c/de2b6ebe0cb7746b5b6b35d79e150d934392b958 · Patch
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note