CVE-2022-50492CWE-416

CVE-2022-50492

High · published October 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: fix use-after-free on probe deferral

The bridge counter was never reset when tearing down the DRM device so

that stale pointers to deallocated structures would be accessed on the

next tear down (e.g. after a second late bind deferral).

Given enough bridges and a few probe deferrals this could currently also

lead to data beyond the bridge array being corrupted.

Patchwork: https://patchwork.freedesktop.org/patch/502665/

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-04T20:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 3.12, < 6.0.76.0.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 04 OCT 15:43Z
    drm/msm: fix use-after-free on probe deferral
    cvelistv5