PT-2025-40723 · Linux+3 · Linux Kernel+3

Published 2022-07-13 · Updated 2025-12-04 · CVE-2022-50489

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's MIPI-DSI host unregistration process. Specifically, when the MIPI-DSI host is unregistered, the mipi dsi host unregister() function iterates through devices on the bus to unregister them. However, it fails to detach these devices from the bus first, leading to potential resource leaks during host cleanup operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Improper Resource Release

Weakness Enumeration

CWE-835

CWE-404

Related Identifiers

ALSA-2025_16880

BDU:2026-04086

CESA-2023_7077

CVE-2022-50489

OESA-2025-2659

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:4111-1

SUSE-SU-2025:4135-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4188-1

SUSE-SU-2025:4320-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 510

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50489.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50349 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4135-1 · Vendor Advisory
• https://git.kernel.org/stable/c/668a8f17b5290d04ef7343636a5588a0692731a1 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40044 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50489 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53199 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50489 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4139-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39973 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53446 · Security Note
• https://ubuntu.com/security/CVE-2022-50489 · Vendor Advisory