PT-2025-37514 · Linux+2 · Linux Kernel+2

Published 2022-01-01 · Updated 2026-04-20 · CVE-2022-50260

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's DRM/MSM subsystem related to inconsistent handling of hardware shutdown logic in the .remove and .shutdown callbacks. The .remove and .shutdown callbacks are executed on different code paths, both responsible for shutting down hardware, but currently lack consistency in MSM drivers. This inconsistency can lead to a kernel panic if drivers for expected sub-devices fail to probe, potentially causing drm atomic helper shutdown() to be called for a DRM device that hasn't been properly initialized, resulting in attempts to take mutexes that are only initialized during a device bind. A previous attempt to fix this issue was incomplete, and the problem persists in certain scenarios, potentially leading to a kernel panic during system shutdown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-70768

CVE-2022-50260

SUSE-SU-2025:03613-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Debian

Linux Kernel

Suse

References · 878

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50260.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50260 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://git.kernel.org/stable/c/26f9a766f87b33c50ed400a9500cc1dc9aced953 · Patch
• https://osv.dev/vulnerability/AZL-70768 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50260 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50260 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50260 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50260 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50260 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50260 · Security Note
• https://git.kernel.org/stable/c/0a58d2ae572adaec8d046f8d35b40c2c32ac7468 · Patch