CVE-2022-50509

In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for kmalloc As the kmalloc may return NULL pointer, it should be better to check the return value in order to avoid NULL poineter dereference, same as the others.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/0209e70ad496c1fcd85c2ec70e6736fd09f95d14	Patch
https://git.kernel.org/stable/c/11e32126b3e56c3156fb610d793732acd2bdac4f	Patch
https://git.kernel.org/stable/c/441c05485cf1a29eef05c1fd8281716815283315	Patch
https://git.kernel.org/stable/c/6e5e5defdb8b0186312c2f855ace175aee6daf9b	Patch
https://git.kernel.org/stable/c/7a2c66429b04e85fee44d6d9f455327bf23cf49c	Patch
https://git.kernel.org/stable/c/aa17a252dbde432095e390e2092205d4debb12e1	Patch
https://git.kernel.org/stable/c/ba9cc9e2035f7a45f5222543265daf7cd51f2530	Patch
https://git.kernel.org/stable/c/d308c4a035b636756786af91e5f39f9d92d7d42a	Patch
https://git.kernel.org/stable/c/d9b37ea8869e4e6da90c07a310d819a78cbd23d2	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

No history.

Information

Published : 2025-10-07 16:15

Updated : 2026-06-17 05:23

NVD link : CVE-2022-50509

Mitre link : CVE-2022-50509

CVE.ORG link : CVE-2022-50509

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2022-50509", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "cb1d3a336371e35c3920cc50a701c5403c255644", "lessThan": "d308c4a035b636756786af91e5f39f9d92d7d42a", "versionType": "git"}, {"status": "affected", "version": "cb1d3a336371e35c3920cc50a701c5403c255644", "lessThan": "11e32126b3e56c3156fb610d793732acd2bdac4f", "versionType": "git"}, {"status": "affected", "version": "cb1d3a336371e35c3920cc50a701c5403c255644", "lessThan": "ba9cc9e2035f7a45f5222543265daf7cd51f2530", "versionType": "git"}, {"status": "affected", "version": "cb1d3a336371e35c3920cc50a701c5403c255644", "lessThan": "7a2c66429b04e85fee44d6d9f455327bf23cf49c", "versionType": "git"}, {"status": "affected", "version": "cb1d3a336371e35c3920cc50a701c5403c255644", "lessThan": "d9b37ea8869e4e6da90c07a310d819a78cbd23d2", "versionType": "git"}, {"status": "affected", "version": "cb1d3a336371e35c3920cc50a701c5403c255644", "lessThan": "441c05485cf1a29eef05c1fd8281716815283315", "versionType": "git"}, {"status": "affected", "version": "cb1d3a336371e35c3920cc50a701c5403c255644", "lessThan": "aa17a252dbde432095e390e2092205d4debb12e1", "versionType": "git"}, {"status": "affected", "version": "cb1d3a336371e35c3920cc50a701c5403c255644", "lessThan": "0209e70ad496c1fcd85c2ec70e6736fd09f95d14", "versionType": "git"}, {"status": "affected", "version": "cb1d3a336371e35c3920cc50a701c5403c255644", "lessThan": "6e5e5defdb8b0186312c2f855ace175aee6daf9b", "versionType": "git"}], "programFiles": ["drivers/media/platform/chips-media/coda-bit.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.19"}, {"status": "unaffected", "version": "0", "lessThan": "3.19", "versionType": "semver"}, {"status": "unaffected", "version": "4.9.337", "versionType": "semver", "lessThanOrEqual": "4.9.*"}, {"status": "unaffected", "version": "4.14.303", "versionType": "semver", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.270", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.229", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.163", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.86", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.0.16", "versionType": "semver", "lessThanOrEqual": "6.0.*"}, {"status": "unaffected", "version": "6.1.2", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/media/platform/chips-media/coda-bit.c"], "defaultStatus": "affected"}]}], "published": "2025-10-07T16:15:33.300", "references": [{"url": "https://git.kernel.org/stable/c/0209e70ad496c1fcd85c2ec70e6736fd09f95d14", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/11e32126b3e56c3156fb610d793732acd2bdac4f", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/441c05485cf1a29eef05c1fd8281716815283315", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6e5e5defdb8b0186312c2f855ace175aee6daf9b", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/7a2c66429b04e85fee44d6d9f455327bf23cf49c", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/aa17a252dbde432095e390e2092205d4debb12e1", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ba9cc9e2035f7a45f5222543265daf7cd51f2530", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d308c4a035b636756786af91e5f39f9d92d7d42a", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d9b37ea8869e4e6da90c07a310d819a78cbd23d2", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: coda: Add check for kmalloc\n\nAs the kmalloc may return NULL pointer,\nit should be better to check the return value\nin order to avoid NULL poineter dereference,\nsame as the others."}], "lastModified": "2026-06-17T05:23:41.507", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5C9AB36-1335-46C4-AE68-045ACEB0954D", "versionEndExcluding": "4.9.337", "versionStartIncluding": "3.19"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B", "versionEndExcluding": "4.14.303", "versionStartIncluding": "4.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F", "versionEndExcluding": "4.19.270", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093", "versionEndExcluding": "5.4.229", "versionStartIncluding": "4.20"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65", "versionEndExcluding": "5.10.163", "versionStartIncluding": "5.5"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE", "versionEndExcluding": "5.15.86", "versionStartIncluding": "5.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F", "versionEndExcluding": "6.0.16", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C", "versionEndExcluding": "6.1.2", "versionStartIncluding": "6.1"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}