{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2022-50317", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-09-15T14:18:36.814Z", "datePublished": "2025-09-15T14:48:50.167Z", "dateUpdated": "2026-05-23T15:24:13.952Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-23T15:24:13.952Z" }, "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: megachips: Fix a null pointer dereference bug\n\nWhen removing the module we will get the following warning:\n\n[ 31.911505] i2c-core: driver [stdp2690-ge-b850v3-fw] unregistered\n[ 31.912484] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI\n[ 31.913338] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\n[ 31.915280] RIP: 0010:drm_bridge_remove+0x97/0x130\n[ 31.921825] Call Trace:\n[ 31.922533] stdp4028_ge_b850v3_fw_remove+0x34/0x60 [megachips_stdpxxxx_ge_b850v3_fw]\n[ 31.923139] i2c_device_remove+0x181/0x1f0\n\nThe two bridges (stdp2690, stdp4028) do not probe at the same time, so\nthe driver does not call ge_b850v3_resgiter() when probing, causing the\ndriver to try to remove the object that has not been initialized.\n\nFix this by checking whether both the bridges are probed." } ], "affected": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/gpu/drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c" ], "versions": [ { "version": "7649972d97fb98578fbc4a351416cf72895e7c4d", "lessThan": "aaa512ad1e59f2edf8a9e4f2b167a44b24670679", "status": "affected", "versionType": "git" }, { "version": "16e3827904932eccfba0915f0c93b519de3536ac", "lessThan": "5bc20bafcd87ba0858ab772cefc7047cb51bc249", "status": "affected", "versionType": "git" }, { "version": "50ad94f8654a53ec9ca3604a7a23cbaf166e0119", "lessThan": "1daf69228e310938177119c4eadcd30fc75c81e0", "status": "affected", "versionType": "git" }, { "version": "b8d10f601f226f055df8b5368d7ea7f369136cd5", "lessThan": "877e92e9b1bdeb580b31a46061005936be902cd4", "status": "affected", "versionType": "git" }, { "version": "405856460d3e7aefb7c1aef047ec88fc4ef2e2a5", "lessThan": "4610e7a4111fa3f3ce27c09d6d94008c55f1cd31", "status": "affected", "versionType": "git" }, { "version": "11632d4aa2b3f126790e81a4415d6c23103cf8bb", "lessThan": "21764467ab396d9f08921e0a5ffa1214244e1ad9", "status": "affected", "versionType": "git" }, { "version": "11632d4aa2b3f126790e81a4415d6c23103cf8bb", "lessThan": "7371fad5cfe6eada6bb5523c895fd6074b15c2b9", "status": "affected", "versionType": "git" }, { "version": "11632d4aa2b3f126790e81a4415d6c23103cf8bb", "lessThan": "1ff673333d46d2c1b053ebd0c1c7c7c79e36943e", "status": "affected", "versionType": "git" }, { "version": "e449461989f0674f188d30494ffd3f5ba74c1a05", "status": "affected", "versionType": "git" }, { "version": "4.14.263", "lessThan": "4.14.296", "status": "affected", "versionType": "semver" }, { "version": "4.19.226", "lessThan": "4.19.262", "status": "affected", "versionType": "semver" }, { "version": "5.4.174", "lessThan": "5.4.220", "status": "affected", "versionType": "semver" }, { "version": "5.10.94", "lessThan": "5.10.150", "status": "affected", "versionType": "semver" }, { "version": "5.15.17", "lessThan": "5.15.75", "status": "affected", "versionType": "semver" }, { "version": "5.16.3", "lessThan": "5.17", "status": "affected", "versionType": "semver" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/gpu/drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c" ], "versions": [ { "version": "5.17", "status": "affected" }, { "version": "0", "lessThan": "5.17", "status": "unaffected", "versionType": "semver" }, { "version": "4.14.296", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "semver" }, { "version": "4.19.262", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.4.220", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.10.150", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.15.75", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.19.17", "lessThanOrEqual": "5.19.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.0.3", "lessThanOrEqual": "6.0.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "cpeApplicability": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14.263", "versionEndExcluding": "4.14.296" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19.226", "versionEndExcluding": "4.19.262" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.174", "versionEndExcluding": "5.4.220" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.94", "versionEndExcluding": "5.10.150" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.17", "versionEndExcluding": "5.15.75" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.17", "versionEndExcluding": "5.19.17" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.17", "versionEndExcluding": "6.0.3" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.17", "versionEndExcluding": "6.1" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16.3" } ] } ] } ], "references": [ { "url": "https://git.kernel.org/stable/c/aaa512ad1e59f2edf8a9e4f2b167a44b24670679" }, { "url": "https://git.kernel.org/stable/c/5bc20bafcd87ba0858ab772cefc7047cb51bc249" }, { "url": "https://git.kernel.org/stable/c/1daf69228e310938177119c4eadcd30fc75c81e0" }, { "url": "https://git.kernel.org/stable/c/877e92e9b1bdeb580b31a46061005936be902cd4" }, { "url": "https://git.kernel.org/stable/c/4610e7a4111fa3f3ce27c09d6d94008c55f1cd31" }, { "url": "https://git.kernel.org/stable/c/21764467ab396d9f08921e0a5ffa1214244e1ad9" }, { "url": "https://git.kernel.org/stable/c/7371fad5cfe6eada6bb5523c895fd6074b15c2b9" }, { "url": "https://git.kernel.org/stable/c/1ff673333d46d2c1b053ebd0c1c7c7c79e36943e" } ], "title": "drm/bridge: megachips: Fix a null pointer dereference bug", "x_generator": { "engine": "bippy-1.2.0" } } } }