CVE-2022-50132

Description

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() If 'ep' is NULL, result of ep_to_cdns3_ep(ep) is invalid pointer and its dereference with priv_ep->cdns3_dev may cause panic. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Reserved 2025-06-18 | Published 2025-06-18 | Updated 2025-06-18 | Assigner Linux

Product status

Default status
unaffected

7733f6c32e36ff9d7adadf40001039bf219b1cbe before 7af83bb516d7aa4f96835288e4aeda21d7aa2a17
affected

7733f6c32e36ff9d7adadf40001039bf219b1cbe before bfa0201468587072454dba7933e4a4a7be44467a
affected

7733f6c32e36ff9d7adadf40001039bf219b1cbe before d342203df9f2d0851b4acd9ed577d73d10eade77
affected

7733f6c32e36ff9d7adadf40001039bf219b1cbe before eb82c0382285ee17a9966aaab27b8becb08eb1ac
affected

7733f6c32e36ff9d7adadf40001039bf219b1cbe before c3ffc9c4ca44bfe9562166793d133e1fb0630ea6
affected

Default status
affected

5.4
affected

Any version before 5.4
unaffected

5.10.137
unaffected

5.15.61
unaffected

5.18.18
unaffected

5.19.2
unaffected

6.0
unaffected

References

git.kernel.org/...c/7af83bb516d7aa4f96835288e4aeda21d7aa2a17

git.kernel.org/...c/bfa0201468587072454dba7933e4a4a7be44467a

git.kernel.org/...c/d342203df9f2d0851b4acd9ed577d73d10eade77

git.kernel.org/...c/eb82c0382285ee17a9966aaab27b8becb08eb1ac

git.kernel.org/...c/c3ffc9c4ca44bfe9562166793d133e1fb0630ea6

cve.org (CVE-2022-50132)

nvd.nist.gov (CVE-2022-50132)

Download JSON