CVE-2022-50132

usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable()

MEDIUM

5.5

CVSS Score

Published: June 18, 2025 at 11:02 AM UTC

Updated: June 17, 2026 at 05:22 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() If 'ep' is NULL, result of ep_to_cdns3_ep(ep) is invalid pointer and its dereference with priv_ep->cdns3_dev may cause panic. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.4 ≤ v < 5.10.1375.4 ≤ v < 5.15.615.4 ≤ v < 5.18.185.4 ≤ v < 5.19.25.4 ≤ v < 6.05.47733f6c32e36ff9d7adadf40001039bf219b1cbe

Vendor states this is fixed in 7af83bb516d7aa4f96835288e4aeda21d7aa2a17 (fixed)

Vendor states this is fixed in bfa0201468587072454dba7933e4a4a7be44467a (fixed)

Vendor states this is fixed in c3ffc9c4ca44bfe9562166793d133e1fb0630ea6 (fixed)

Vendor states this is fixed in d342203df9f2d0851b4acd9ed577d73d10eade77 (fixed)

Vendor states this is fixed in eb82c0382285ee17a9966aaab27b8becb08eb1ac (fixed)

Vendor states this is fixed in 5.10.137 (unaffected)

Vendor states this is fixed in 5.15.61 (unaffected)

Vendor states this is fixed in 5.18.18 (unaffected)

Vendor states this is fixed in 5.19.2 (unaffected)

Vendor states this is fixed in 5.4 (unaffected)

Vendor states this is fixed in 6.0 (unaffected)