CVE-2022-50468

platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init()

State: Published
Severity: Not scored
Published: Oct 1, 2025
Updated: May 11, 2026
Reserved: Oct 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init()

The following WARNING message was given when rmmod cros_usbpd_notify:

Unexpected driver unregister! WARNING: CPU: 0 PID: 253 at drivers/base/driver.c:270 driver_unregister+0x8a/0xb0 Modules linked in: cros_usbpd_notify(-) CPU: 0 PID: 253 Comm: rmmod Not tainted 6.1.0-rc3 #24 ... Call Trace: <TASK> cros_usbpd_notify_exit+0x11/0x1e [cros_usbpd_notify] __x64_sys_delete_module+0x3c7/0x570 ? __ia32_sys_delete_module+0x570/0x570 ? lock_is_held_type+0xe3/0x140 ? syscall_enter_from_user_mode+0x17/0x50 ? rcu_read_lock_sched_held+0xa0/0xd0 ? syscall_enter_from_user_mode+0x1c/0x50 do_syscall_64+0x37/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f333fe9b1b7

The reason is that the cros_usbpd_notify_init() does not check the return value of platform_driver_register(), and the cros_usbpd_notify can install successfully even if platform_driver_register() failed.

Fix by checking the return value of platform_driver_register() and unregister cros_usbpd_notify_plat_driver when it failed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before 5c0cacdd354987f8f5348d16908716f154047890Affected ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before cab345f9d51943898e406275f9607c145adb1877Affected ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before 7b6ee54995739202b4a0cc01b7e9269f761c573dAffected ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before 751f12696d797e785d2611099fe9f0569d47556eAffected ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before 5a2d96623670155d94aca72c320c0ac27bdc6bd2Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before 5c0cacdd354987f8f5348d16908716f154047890Affected
ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before cab345f9d51943898e406275f9607c145adb1877Affected
ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before 7b6ee54995739202b4a0cc01b7e9269f761c573dAffected
ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before 751f12696d797e785d2611099fe9f0569d47556eAffected
ec2daf6e33f9f9113ba085b6ff88592907b6f1ce to before 5a2d96623670155d94aca72c320c0ac27bdc6bd2Affected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.