Riskcovery

CVE-2022-50181

virtio-gpu: fix a missing check to avoid NULL dereference

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

virtio-gpu: fix a missing check to avoid NULL dereference

'cache_ent' could be set NULL inside virtio_gpu_cmd_get_capset() and it will lead to a NULL dereference by a lately use of it (i.e., ptr = cache_ent->caps_cache). Fix it with a NULL check.

[ kraxel: minor codestyle fixup ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before 259773fc874258606c0121767a4a27466ff337ebAffected
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before 39caef09666c1d8274abf9472c72bcac236dc5fbAffected
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before adbdd21983fa292e53aec3eab97306b2961ea887Affected
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before 367882a5a9448b5e1ba756125308092d614cb96cAffected
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before bd63f11f4c3c46afec07d821f74736161ff6e526Affected
LinuxLinux
  • 4.4Affected
  • before 4.4Not affected
  • 5.10.137 through 5.10.*Not affected
  • 5.15.61 through 5.15.*Not affected
  • 5.18.18 through 5.18.*Not affected
  • 5.19.2 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.