CVE-2022-50132

MEDIUM EPSS 5.1%
Published Jun 18, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jun 18, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() If 'ep' is NULL, result of ep_to_cdns3_ep(ep) is invalid pointer and its dereference with priv_ep->cdns3_dev may cause panic. Found by Linux Verification Center (linuxtesting.org) with SVACE.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
5.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 4

VendorProductVersionRange
linuxlinux_kernel*≥5.4  –  <5.10.137
linuxlinux_kernel*≥5.11  –  <5.15.61
linuxlinux_kernel*≥5.16  –  <5.18.18
linuxlinux_kernel*≥5.19  –  <5.19.2

References 5

  • git.kernel.org https://git.kernel.org/stable/c/7af83bb516d7aa4f96835288e4aeda21d7aa2a17
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bfa0201468587072454dba7933e4a4a7be44467a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c3ffc9c4ca44bfe9562166793d133e1fb0630ea6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d342203df9f2d0851b4acd9ed577d73d10eade77
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eb82c0382285ee17a9966aaab27b8becb08eb1ac
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/7af83bb516d7aa4f96835288e4aeda21d7aa2a17
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bfa0201468587072454dba7933e4a4a7be44467a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c3ffc9c4ca44bfe9562166793d133e1fb0630ea6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d342203df9f2d0851b4acd9ed577d73d10eade77
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eb82c0382285ee17a9966aaab27b8becb08eb1ac
    Patch