PT-2025-38429 · Adv7511+5 · Adv7511+5

Published 2022-06-12 · Updated 2025-10-23 · CVE-2022-50412

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel where the cec unregister adapter() function assumes the underlying adapter operations are callable. Specifically, unregistering the CEC adapter can invalidate the physical address, leading to a kernel oops when the adv7511 module is removed. This occurs because the i2c cec device is not unregistered before the cec adapter, resulting in an attempt to access invalid memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-672

CWE-404

CWE-825

Related Identifiers

BDU:2026-03270

CESA-2023_7077

CVE-2022-50412

OPENSUSE-SU-2025:15585-1

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Adv7511

References · 857

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50412.json · Exploit
• https://git.kernel.org/stable/c/4d4d5bc659206b187263190ad9a03513f625659d · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50412 · Vendor Advisory
• https://git.kernel.org/stable/c/f369fb4deed7ab997cfa703dc85ec08b3adc1af8 · Patch
• https://osv.dev/vulnerability/CVE-2022-50412 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50412 · Security Note
• https://ubuntu.com/security/CVE-2022-50412 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03270 · Security Note
• https://git.kernel.org/stable/c/86ae5170786aea3e1751123ca55700fb9b37b623 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2025:15585-1 · Vendor Advisory
• https://git.kernel.org/stable/c/40cdb02cb9f965732eb543d47f15bef8d10f0f5f · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50412 · Vendor Advisory
• https://git.kernel.org/stable/c/3747465c5da7a11957a34bbb9485d9fc253b91cc · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50412 · Vendor Advisory