PT-2025-43070 · Linux+1 · Linux Kernel+1

Published 2022-09-23 · Updated 2025-12-04 · CVE-2022-50560

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19-rc6-lrmbkasan+

Description The Linux kernel has a flaw within the drm/meson subsystem. Specifically, the failure to call component master del when unloading the meson drm module causes the aggregate device to remain indefinitely in the global aggregate devices list. This issue occurs when unloading and reloading the meson dw hdmi module, leading to a use-after-free condition when component add calls try to bring up aggregate device and encounters the unbound meson drm aggregate device. This dereferencing of freed memory results in a kernel crash. The crash report indicates a read of size 8 at an invalid memory address.

Recommendations Update to a newer version of the Linux kernel that addresses this issue.

Exploit

Fix

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

BDU:2026-04859

CVE-2022-50560

SUSE-SU-2025:4111-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

Affected Products

Linux Kernel

Suse

References · 450

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50560.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50560 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04859 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50560 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50560 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4320-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50560 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50560 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4139-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50560 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50560 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-53578 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.75 · Note