CVE-2022-50538: vme: Fix error not catched in fake_init()
In the Linux kernel, the following vulnerability has been resolved:
vme: Fix error not catched in fakeinit()
In fakeinit(), rootdeviceregister() is possible to fail but it's ignored, which can cause unregistering vmeroot fail when exit.
general protection fault, probably for non-canonical address 0xdffffc000000008c KASAN: null-ptr-deref in range [0x0000000000000460-0x0000000000000467] RIP: 0010:rootdeviceunregister+0x26/0x60 Call Trace: <TASK> x64sysdeletemodule+0x34f/0x540 dosyscall64+0x38/0x90 entrySYSCALL64afterhwframe+0x63/0xcd
Return error when rootdeviceregister() fails.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50538?
The severity of CVE-2022-50538 is categorized as medium due to the potential for causing a general protection fault.
How do I fix CVE-2022-50538?
To fix CVE-2022-50538, update your Linux kernel to the latest stable version where this vulnerability has been patched.
What applications are affected by CVE-2022-50538?
CVE-2022-50538 affects the Linux kernel and can impact systems utilizing various distributions that run this kernel.
What type of vulnerability is CVE-2022-50538?
CVE-2022-50538 is a programming error in the Linux kernel that leads to the failure of error handling in the fake_init() function.
What are the potential consequences of CVE-2022-50538?
The potential consequences of CVE-2022-50538 include an inability to properly unregister devices, which may lead to system stability issues.