PT-2025-41043 · Linux · Linux Kernel

Published 2022-12-05 · Updated 2025-10-17 · CVE-2022-50538

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where an error in the fake init() function was not properly handled. Specifically, a failure in root device register() was ignored, potentially leading to issues during unregistration of the vme root device upon exit. This could result in a general protection fault and a null-ptr-deref, as indicated by KASAN. The root cause involves a missing error check after calling root device register().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-03814

CVE-2022-50538

OESA-2025-2468

Affected Products

Linux Kernel

References · 48

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50538.json · Exploit
• https://git.kernel.org/stable/c/37d3de40c1ffb6a5e626bf46ff5ef5766c824e2c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50410 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50521 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53220 · Security Note
• https://git.kernel.org/stable/c/f3f65c4177846c483bf009f8c512ab04b3c62466 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50538 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50414 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53625 · Security Note
• https://git.kernel.org/stable/c/e831fdd60e5863ee03173baf5a0f7c5450b44381 · Patch
• https://git.kernel.org/stable/c/60ff9bd4ffc87bace581e235a6728f5ac8e5071f · Patch
• https://ubuntu.com/security/CVE-2022-50538 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50538 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50347 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38700 · Security Note