CVE-2022-50538

vme: Fix error not catched in fake_init()

MEDIUM
5.5
CVSS Score
Published: October 7, 2025 at 03:21 PM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: vme: Fix error not catched in fake_init() In fake_init(), __root_device_register() is possible to fail but it's ignored, which can cause unregistering vme_root fail when exit. general protection fault, probably for non-canonical address 0xdffffc000000008c KASAN: null-ptr-deref in range [0x0000000000000460-0x0000000000000467] RIP: 0010:root_device_unregister+0x26/0x60 Call Trace: <TASK> __x64_sys_delete_module+0x34f/0x540 do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd Return error when __root_device_register() fails.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.10 ≤ v < 4.14.3034.15 ≤ v < 4.19.2704.20 ≤ v < 5.4.2294.9 ≤ v < 4.14.3034.9 ≤ v < 4.19.2704.9 ≤ v < 4.9.3374.9 ≤ v < 5.10.1634.9 ≤ v < 5.15.864.9 ≤ v < 5.4.2294.9 ≤ v < 6.0.164.9 ≤ v < 6.1.24.9 ≤ v < 6.25.11 ≤ v < 5.15.865.16 ≤ v < 6.0.165.5 ≤ v < 5.10.1636.1 ≤ v < 6.1.24.9658bcdae9c6755806e66b33e29d56b33a3ff421a
Vendor states this is fixed in 09be0e7ac5f9374b6f8de72c89ed67129af71f65 (fixed)
Vendor states this is fixed in 37d3de40c1ffb6a5e626bf46ff5ef5766c824e2c (fixed)
Vendor states this is fixed in 4bc217b25ea81034fad8e33fd33e4659f086421d (fixed)
Vendor states this is fixed in 60ff9bd4ffc87bace581e235a6728f5ac8e5071f (fixed)
Vendor states this is fixed in 69b43937f14bdc3594f57f1a507a14f3d1187136 (fixed)
Vendor states this is fixed in 7bef797d707f1744f71156b21d41e3b8c946631f (fixed)
Vendor states this is fixed in a2a93546d414c7fe4862b87183fb737d1300d9d2 (fixed)
Vendor states this is fixed in e831fdd60e5863ee03173baf5a0f7c5450b44381 (fixed)
Vendor states this is fixed in f3f65c4177846c483bf009f8c512ab04b3c62466 (fixed)
Vendor states this is fixed in 4.14.303 (unaffected)
Vendor states this is fixed in 4.19.270 (unaffected)
Vendor states this is fixed in 4.9 (unaffected)
Vendor states this is fixed in 4.9.337 (unaffected)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.86 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 6.0.16 (unaffected)
Vendor states this is fixed in 6.1.2 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card