PT-2025-38331 · Linux+2 · Linux Kernel+2

Published 2022-11-25 · Updated 2026-04-20 · CVE-2022-50383

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where the core thread may call v4l2 m2m buf done to set the destination buffer to done for late architecture. If the late architecture calls v4l2 m2m buf done and job finish to free the destination buffer when a late decode error occurs, the core thread may access a NULL pointer, leading to a crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-02373

CVE-2022-50383

Affected Products

Astra Linux

Debian

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50383.json · Exploit
• https://git.kernel.org/stable/c/66d26ed30056e7d2da3e9c14125ffe6049a4f907 · Patch
• https://git.kernel.org/stable/c/3568ecd3f3a6d133ab7feffbba34955c8c79bbc4 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50383 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50383 · Security Note
• https://git.kernel.org/stable/c/eeb090420f3477eb5011586709409fc655c2b16c · Patch
• https://ubuntu.com/security/CVE-2022-50383 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50383 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50383 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02373 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50383 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50383 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50383 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.16 · Note