PT-2025-40153 · Linux+2 · Linux Kernel+2

Published 2022-11-25 · Updated 2025-10-23 · CVE-2022-50468

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3

Description The Linux kernel contains a flaw in the cros usbpd notify module where the cros usbpd notify init() function does not validate the return value of platform driver register(). This can lead to successful module installation even if registration fails, potentially causing issues during module removal as indicated by an "Unexpected driver unregister!" warning. The issue occurs during the unregistration of the cros usbpd notify driver. The platform driver register() function is responsible for registering a platform driver with the kernel. Failure to check its return value can result in inconsistent driver state.

Recommendations Update to Linux kernel version 6.1.0-rc3 or later to address this issue.

Exploit

Fix

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2026-06093

CVE-2022-50468

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Linux Kernel

Red Hat

Suse

References · 862

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50468.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50468 · Vendor Advisory
• https://git.kernel.org/stable/c/5a2d96623670155d94aca72c320c0ac27bdc6bd2 · Patch
• https://bdu.fstec.ru/vul/2026-06093 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50468 · Security Note
• https://git.kernel.org/stable/c/7b6ee54995739202b4a0cc01b7e9269f761c573d · Patch
• https://git.kernel.org/stable/c/5c0cacdd354987f8f5348d16908716f154047890 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50468 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50468 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50468 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://git.kernel.org/stable/c/cab345f9d51943898e406275f9607c145adb1877 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory