CVE-2022-50481

cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()

State: Published
Severity: Not scored
Published: Oct 4, 2025
Updated: May 11, 2026
Reserved: Oct 4, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()

If device_register() fails in cxl_register_afu|adapter(), the device is not added, device_unregister() can not be called in the error path, otherwise it will cause a null-ptr-deref because of removing not added device.

As comment of device_register() says, it should use put_device() to give up the reference in the error path. So split device_unregister() into device_del() and put_device(), then goes to put dev when register fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 96fba6fb95bdede80583c262ac185da09661f264Affected 14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 1ae581696b7a799afa39a664c4b721569643f58aAffected 14baf4d9c739e6e69150512d2eb23c71fffcc192 to before d775a1da5a52b4f4bb02f2707ba420d1bec48dbbAffected 14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 60b2ed21a65f3f5318666ccd765c3507991370cfAffected 14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 170e8c2d2b61e15e7f7cfeded81bc1e959a15ed8Affected 14baf4d9c739e6e69150512d2eb23c71fffcc192 to before e5021bbf11b024cc65ea1e84c377df484183be4bAffected 14baf4d9c739e6e69150512d2eb23c71fffcc192 to before b32559ee4e6667c5c3daf4ec5454c277d1f255d2Affected 14baf4d9c739e6e69150512d2eb23c71fffcc192 to before ab44c182353be101c3be9465e1d15d42130c53c4Affected 14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 61c80d1c3833e196256fb060382db94f24d3d9a7Affected
LinuxLinux	4.6Affected before 4.6Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 96fba6fb95bdede80583c262ac185da09661f264Affected
14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 1ae581696b7a799afa39a664c4b721569643f58aAffected
14baf4d9c739e6e69150512d2eb23c71fffcc192 to before d775a1da5a52b4f4bb02f2707ba420d1bec48dbbAffected
14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 60b2ed21a65f3f5318666ccd765c3507991370cfAffected
14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 170e8c2d2b61e15e7f7cfeded81bc1e959a15ed8Affected
14baf4d9c739e6e69150512d2eb23c71fffcc192 to before e5021bbf11b024cc65ea1e84c377df484183be4bAffected
14baf4d9c739e6e69150512d2eb23c71fffcc192 to before b32559ee4e6667c5c3daf4ec5454c277d1f255d2Affected
14baf4d9c739e6e69150512d2eb23c71fffcc192 to before ab44c182353be101c3be9465e1d15d42130c53c4Affected
14baf4d9c739e6e69150512d2eb23c71fffcc192 to before 61c80d1c3833e196256fb060382db94f24d3d9a7Affected

LinuxLinux

4.6Affected
before 4.6Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.