PT-2025-37619 · Linux+5 · Linux Kernel+5

Published 2022-08-30 · Updated 2025-10-23 · CVE-2022-50317

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue has been resolved in the Linux kernel’s drm/bridge module, specifically within the megachips driver. This occurs during module removal, potentially leading to a general protection fault. The issue arises because the driver attempts to remove an object that has not been initialized, due to the bridges not being probed simultaneously.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-02433

CESA-2023_7077

CVE-2022-50317

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:03613-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Megachips Driver

References · 890

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50317.json · Exploit
• https://git.kernel.org/stable/c/4610e7a4111fa3f3ce27c09d6d94008c55f1cd31 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50317 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://git.kernel.org/stable/c/877e92e9b1bdeb580b31a46061005936be902cd4 · Patch
• https://git.kernel.org/stable/c/5bc20bafcd87ba0858ab772cefc7047cb51bc249 · Patch
• https://git.kernel.org/stable/c/21764467ab396d9f08921e0a5ffa1214244e1ad9 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/7371fad5cfe6eada6bb5523c895fd6074b15c2b9 · Patch
• https://git.kernel.org/stable/c/1daf69228e310938177119c4eadcd30fc75c81e0 · Patch
• https://osv.dev/vulnerability/CVE-2022-50317 · Vendor Advisory
• https://git.kernel.org/stable/c/aaa512ad1e59f2edf8a9e4f2b167a44b24670679 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50317 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50317 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02433 · Security Note