PT-2025-43068 · Linux+1 · Linux Kernel+1

Published 2022-11-09 · Updated 2025-10-22 · CVE-2022-50558

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue relates to a null pointer dereference within the regmap-irq subsystem of the Linux kernel. Specifically, the regmap add irq chip fwnode function was not updated to utilize the num config regs property after its introduction in a prior commit. A subsequent commit removed the older num type reg property, leading to a null pointer dereference in the regmap irq set type function when attempting to access an unallocated buffer. The call trace indicates the issue occurs during interrupt handling, specifically within the request threaded irq function. The root cause is the failure to properly update the regmap add irq chip fwnode function to use the new num config regs property, resulting in a memory access error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

NULL Pointer Dereference

Weakness Enumeration

CWE-404

CWE-476

Related Identifiers

BDU:2026-03905

CVE-2022-50558

RHSA-2023:6583

RHSA-2023_6583

Affected Products

Linux Kernel

Red Hat

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50558.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50558 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50558 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50558 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50558 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03905 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50558 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50558 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50558 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2025102206-CVE-2022-50558-444f@gregkh/T · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.2 · Note
• https://access.redhat.com/security/cve/cve-2022-50558 · Note
• https://git.kernel.org/stable/c/961db32e52f4d34a9a95939a30393fd190397f84 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/84498d1fb35de6ab71bdfdb6270a464fb4a0951b · Note