PT-2025-40132 · Qemu+3 · Qemu+3

Published 2022-12-12 · Updated 2025-10-23 · CVE-2022-50447

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc7-02243-gb84a13ff4eda

Description A crash can occur in the Bluetooth stack when attempting to connect multiple ISO sockets without using DEFER SETUP. This issue is related to a null-ptr-deref in the hci create cis sync function. The crash occurs within the hci cmd sync work workqueue. The issue was observed on QEMU Standard PC hardware with BIOS version 1.16.0-1.fc36.

Recommendations Update to a version newer than 6.0.0-rc7-02243-gb84a13ff4eda.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-06087

CVE-2022-50447

RHSA-2024:2394

RHSA-2024_2394

RHSA-2026:0534

RHSA-2026:0535

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Linux Kernel

Qemu

Red Hat

Suse

References · 833

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50447.json · Exploit
• https://git.kernel.org/stable/c/09a3b0c9c7c6b10587fbb610b718014703cff341 · Patch
• https://bdu.fstec.ru/vul/2026-06087 · Security Note
• https://git.kernel.org/stable/c/50757a259ba78c4e938b5735e76ffec6cd0c942e · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50447 · Vendor Advisory
• https://git.kernel.org/stable/c/a190cd9dc62d6ebeb679c1abe9dda4162dfefc84 · Patch
• https://osv.dev/vulnerability/CVE-2022-50447 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50447 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50447 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50447 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50447 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50447 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-38488 · Note