{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "3499495205a676d85fcc2f3c28e35ec9b43c47e3"
            },
            {
              "fixed": "c6db0c32f39684c89c97bc1ba1c9c4249ca09e48"
            },
            {
              "fixed": "fc6d0f65f22040c6cc8a5ce032bf90252629de50"
            },
            {
              "fixed": "fc307b2905a3dd75c50a53b4d87ac9c912fb7c4e"
            },
            {
              "fixed": "5e4500454d75dd249be4695d83afa3ba0724c37e"
            },
            {
              "fixed": "3505c187b86136250b39e62c72a3a70435277af6"
            },
            {
              "fixed": "ac838c663ba1fd6bff35a817fd89a47ab55e88e0"
            },
            {
              "fixed": "77f8b628affaec692d83ad8bfa3520db8a0cc493"
            },
            {
              "fixed": "67c98fec87ed76b1feb2ae810051afd88dfa9df6"
            },
            {
              "fixed": "41f563ab3c33698bdfc3403c7c2e6c94e73681e4"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.6.15"
            },
            {
              "fixed": "4.9.337"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "4.10.0"
            },
            {
              "fixed": "4.14.303"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "4.15.0"
            },
            {
              "fixed": "4.19.270"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "4.20.0"
            },
            {
              "fixed": "5.4.229"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.5.0"
            },
            {
              "fixed": "5.10.163"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "5.15.87"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.0.18"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.1.0"
            },
            {
              "fixed": "6.1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50415.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nparisc: led: Fix potential null-ptr-deref in start_task()\n\nstart_task() calls create_singlethread_workqueue() and not checked the\nret value, which may return NULL. And a null-ptr-deref may happen:\n\nstart_task()\n    create_singlethread_workqueue() # failed, led_wq is NULL\n    queue_delayed_work()\n        queue_delayed_work_on()\n            __queue_delayed_work()  # warning here, but continue\n                __queue_work()      # access wq-\u003eflags, null-ptr-deref\n\nCheck the ret value and return -ENOMEM if it is NULL.",
  "id": "CVE-2022-50415",
  "modified": "2026-07-15T01:49:07.549032736Z",
  "published": "2025-09-18T16:03:58.836Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3505c187b86136250b39e62c72a3a70435277af6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/41f563ab3c33698bdfc3403c7c2e6c94e73681e4"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/5e4500454d75dd249be4695d83afa3ba0724c37e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/67c98fec87ed76b1feb2ae810051afd88dfa9df6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/77f8b628affaec692d83ad8bfa3520db8a0cc493"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ac838c663ba1fd6bff35a817fd89a47ab55e88e0"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c6db0c32f39684c89c97bc1ba1c9c4249ca09e48"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/fc307b2905a3dd75c50a53b4d87ac9c912fb7c4e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/fc6d0f65f22040c6cc8a5ce032bf90252629de50"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50415.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50415"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.8.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "parisc: led: Fix potential null-ptr-deref in start_task()"
}