CVE-2022-50132

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50132
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() If 'ep' is NULL, result of ep_to_cdns3_ep(ep) is invalid pointer and its dereference with priv_ep->cdns3_dev may cause panic. Found by Linux Verification Center (linuxtesting.org) with SVACE.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/7af83bb516d7aa4f96835288e4aeda21d7aa2a17 Patch
https://git.kernel.org/stable/c/bfa0201468587072454dba7933e4a4a7be44467a Patch
https://git.kernel.org/stable/c/c3ffc9c4ca44bfe9562166793d133e1fb0630ea6 Patch
https://git.kernel.org/stable/c/d342203df9f2d0851b4acd9ed577d73d10eade77 Patch
https://git.kernel.org/stable/c/eb82c0382285ee17a9966aaab27b8becb08eb1ac Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 18:09

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE CWE-476
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: cdns3: cambio de la asignación de 'priv_ep' en cdns3_gadget_ep_dequeue() y cdns3_gadget_ep_enable(). Si 'ep' es nulo, el resultado de ep_to_cdns3_ep(ep) es un puntero no válido y su desreferencia con priv_ep->cdns3_dev puede causar pánico. Encontrado por el Centro de Verificación de Linux (linuxtesting.org) con SVACE.
References () https://git.kernel.org/stable/c/7af83bb516d7aa4f96835288e4aeda21d7aa2a17 - () https://git.kernel.org/stable/c/7af83bb516d7aa4f96835288e4aeda21d7aa2a17 - Patch
References () https://git.kernel.org/stable/c/bfa0201468587072454dba7933e4a4a7be44467a - () https://git.kernel.org/stable/c/bfa0201468587072454dba7933e4a4a7be44467a - Patch
References () https://git.kernel.org/stable/c/c3ffc9c4ca44bfe9562166793d133e1fb0630ea6 - () https://git.kernel.org/stable/c/c3ffc9c4ca44bfe9562166793d133e1fb0630ea6 - Patch
References () https://git.kernel.org/stable/c/d342203df9f2d0851b4acd9ed577d73d10eade77 - () https://git.kernel.org/stable/c/d342203df9f2d0851b4acd9ed577d73d10eade77 - Patch
References () https://git.kernel.org/stable/c/eb82c0382285ee17a9966aaab27b8becb08eb1ac - () https://git.kernel.org/stable/c/eb82c0382285ee17a9966aaab27b8becb08eb1ac - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 18:09

NVD link : CVE-2022-50132

Mitre link : CVE-2022-50132

CVE.ORG link : CVE-2022-50132

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference