CVE-2022-50634

power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe()

published December 9, 2025

CVSS
—
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe()

cw_bat_probe() calls create_singlethread_workqueue() and not checked the

ret value, which may return NULL. And a null-ptr-deref may happen:

cw_bat_probe()

create_singlethread_workqueue() # failed, cw_bat->wq is NULL

queue_delayed_work()

queue_delayed_work_on()

__queue_delayed_work() # warning here, but continue

__queue_work() # access wq->flags, null-ptr-deref

Check the ret value and return -ENOMEM if it is NULL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00197 · 8.9th percentile
Published
2025-12-09T00:00Z
EPSS history
Timeline
  • 09 DEC 00:00Z
    power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe()
    cvelistv5