CVE-2022-50509
media: coda: Add check for kmalloc
MEDIUM
5.5
CVSS Score
Published: October 7, 2025 at 03:19 PM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
Description
In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for kmalloc As the kmalloc may return NULL pointer, it should be better to check the return value in order to avoid NULL poineter dereference, same as the others.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.19 ≤ v < 4.14.3033.19 ≤ v < 4.19.2703.19 ≤ v < 4.9.3373.19 ≤ v < 5.10.1633.19 ≤ v < 5.15.863.19 ≤ v < 5.4.2293.19 ≤ v < 6.0.163.19 ≤ v < 6.1.23.19 ≤ v < 6.24.10 ≤ v < 4.14.3034.15 ≤ v < 4.19.2704.20 ≤ v < 5.4.2295.11 ≤ v < 5.15.865.16 ≤ v < 6.0.165.5 ≤ v < 5.10.1636.1 ≤ v < 6.1.23.19cb1d3a336371e35c3920cc50a701c5403c255644
Vendor states this is fixed in 0209e70ad496c1fcd85c2ec70e6736fd09f95d14 (fixed)
Vendor states this is fixed in 11e32126b3e56c3156fb610d793732acd2bdac4f (fixed)
Vendor states this is fixed in 441c05485cf1a29eef05c1fd8281716815283315 (fixed)
Vendor states this is fixed in 6e5e5defdb8b0186312c2f855ace175aee6daf9b (fixed)
Vendor states this is fixed in 7a2c66429b04e85fee44d6d9f455327bf23cf49c (fixed)
Vendor states this is fixed in aa17a252dbde432095e390e2092205d4debb12e1 (fixed)
Vendor states this is fixed in ba9cc9e2035f7a45f5222543265daf7cd51f2530 (fixed)
Vendor states this is fixed in d308c4a035b636756786af91e5f39f9d92d7d42a (fixed)
Vendor states this is fixed in d9b37ea8869e4e6da90c07a310d819a78cbd23d2 (fixed)
Vendor states this is fixed in 3.19 (unaffected)
Vendor states this is fixed in 4.14.303 (unaffected)
Vendor states this is fixed in 4.19.270 (unaffected)
Vendor states this is fixed in 4.9.337 (unaffected)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.86 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 6.0.16 (unaffected)
Vendor states this is fixed in 6.1.2 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/d308c4a035b636756786af91e5f39f9d92d7d42a
- https://git.kernel.org/stable/c/11e32126b3e56c3156fb610d793732acd2bdac4f
- https://git.kernel.org/stable/c/ba9cc9e2035f7a45f5222543265daf7cd51f2530
- https://git.kernel.org/stable/c/7a2c66429b04e85fee44d6d9f455327bf23cf49c
- https://git.kernel.org/stable/c/d9b37ea8869e4e6da90c07a310d819a78cbd23d2
References (9)
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-476
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card