{"schema_version":"1.9.0","id":"CVE-2022-50244","published":"2025-09-15T14:02:01.364Z","modified":"2026-08-12T03:51:18.303173590Z","related":["SUSE-SU-2025:03614-1"],"summary":"cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ncxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()\n\nIf device_register() fails in cxl_pci_afu|adapter(), the device\nis not added, device_unregister() can not be called in the error\npath, otherwise it will cause a null-ptr-deref because of removing\nnot added device.\n\nAs comment of device_register() says, it should use put_device() to give\nup the reference in the error path. So split device_unregister() into\ndevice_del() and put_device(), then goes to put dev when register fails.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f204e0b8cedd7da1dfcfd05ed6b7692737e24029"},{"fixed":"82e68432668ae75b4c814d160f6987ecb0681273"},{"fixed":"82e5481428faf11c79b9c094dd24a1849bbf64ac"},{"fixed":"c4b2e35df919d99bbbed033c2fa0b607f9f463b5"},{"fixed":"361412dae1690d4b5df6f92fc943cdc773c95cbc"},{"fixed":"0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec"},{"fixed":"22511eefa61db26e12c97dd7ada3071dbdfcb004"},{"fixed":"139abd4c626a6f7ce02789ed5f73aa2256e0542b"},{"fixed":"2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339"},{"fixed":"02cd3032b154fa02fdf90e7467abaeed889330b2"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50244.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.18.0"},{"fixed":"4.9.337"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.10.0"},{"fixed":"4.14.303"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.19.270"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.20.0"},{"fixed":"5.4.229"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0"},{"fixed":"5.10.163"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.86"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.0.16"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.1.0"},{"fixed":"6.1.2"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50244.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/02cd3032b154fa02fdf90e7467abaeed889330b2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec"},{"type":"WEB","url":"https://git.kernel.org/stable/c/139abd4c626a6f7ce02789ed5f73aa2256e0542b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/22511eefa61db26e12c97dd7ada3071dbdfcb004"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339"},{"type":"WEB","url":"https://git.kernel.org/stable/c/361412dae1690d4b5df6f92fc943cdc773c95cbc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/82e5481428faf11c79b9c094dd24a1849bbf64ac"},{"type":"WEB","url":"https://git.kernel.org/stable/c/82e68432668ae75b4c814d160f6987ecb0681273"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c4b2e35df919d99bbbed033c2fa0b607f9f463b5"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50244.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50244"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50244.json"}}