CVE-2022-50481 - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()

Back Back to CVE browser

MEDIUM

cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()

Published Oct 4, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.16%

Description

If device_register() fails in cxl_register_afu|adapter(), the device is not added, device_unregister() can not be called in the error path, otherwise it will cause a null-ptr-deref because of removing not added device.

As comment of device_register() says, it should use put_device() to give up the reference in the error path. So split device_unregister() into device_del() and put_device(), then goes to put dev when register fails.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  4.6
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <4.6
- Version
  4.14.303
  Status
  unaffected
  Constraints
  <=4.14.*
- Version
  4.19.270
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  4.9.337
  Status
  unaffected
  Constraints
  <=4.9.*
- Version
  5.10.163
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.86
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.4.229
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.0.16
  Status
  unaffected
  Constraints
  <=6.0.*
- Version
  6.1.2
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.2
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
4.6	affected	-
0	unaffected	<4.6
4.14.303	unaffected	<=4.14.*
4.19.270	unaffected	<=4.19.*
4.9.337	unaffected	<=4.9.*
5.10.163	unaffected	<=5.10.*
5.15.86	unaffected	<=5.15.*
5.4.229	unaffected	<=5.4.*
6.0.16	unaffected	<=6.0.*
6.1.2	unaffected	<=6.1.*
6.2	unaffected	<=*

Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Fix deferred
Red Hat Enterprise Linux 7

kernel-rt

Fix deferred
Red Hat Enterprise Linux 8

kernel

Fix deferred
Red Hat Enterprise Linux 8

kernel-rt

Fix deferred
Red Hat Enterprise Linux 9

kernel

Fix deferred
Red Hat Enterprise Linux 9

kernel-rt

Fix deferred

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 7	kernel-rt	Fix deferred	n/a
Red Hat Enterprise Linux 8	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 8	kernel-rt	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel-rt	Fix deferred	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (15)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-50481		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2401558		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-32381		Advisory
https://git.kernel.org/stable/c/170e8c2d2b61e15e7f7cfeded81bc1e959a15ed8		Patch
https://git.kernel.org/stable/c/1ae581696b7a799afa39a664c4b721569643f58a		Patch
https://git.kernel.org/stable/c/60b2ed21a65f3f5318666ccd765c3507991370cf		Patch
https://git.kernel.org/stable/c/61c80d1c3833e196256fb060382db94f24d3d9a7		Patch
https://git.kernel.org/stable/c/96fba6fb95bdede80583c262ac185da09661f264		Patch
https://git.kernel.org/stable/c/ab44c182353be101c3be9465e1d15d42130c53c4		Patch
https://git.kernel.org/stable/c/b32559ee4e6667c5c3daf4ec5454c277d1f255d2		Patch
https://git.kernel.org/stable/c/d775a1da5a52b4f4bb02f2707ba420d1bec48dbb		Patch
https://git.kernel.org/stable/c/e5021bbf11b024cc65ea1e84c377df484183be4b		Patch
https://lore.kernel.org/linux-cve-announce/2025100439-CVE-2022-50481-3d22@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-50481
https://www.cve.org/CVERecord?id=CVE-2022-50481