PT-2025-53026 · Linux · Linux Kernel

Published 2022-09-24 · Updated 2026-02-24 · CVE-2022-50722

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The IMGU driver in the Linux kernel had a flaw where it attempted to dereference a NULL pointer when the sd state argument to functions like v4l2 subdev get try crop() was NULL. This occurred because the driver acquired pointers to active selections and attempted to determine which one to use before verifying if the sd state argument was valid. This could lead to a system crash or other undefined behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

NULL Pointer Dereference

Weakness Enumeration

CWE-404

CWE-476

Related Identifiers

BDU:2026-04215

CVE-2022-50722

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 973

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50722.json · Exploit
• https://bdu.fstec.ru/vul/2026-04215 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50722 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50722 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50722 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50722 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50722 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50722 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50722 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note