CVE-2022-50875

of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()

When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will be NULL, and strcmp() will cause null pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2fe0e8769df9fed5098daea7db933bc414c329d7 to before 9ec5781879b4535ad59b5354b385825378e45618Affected 2fe0e8769df9fed5098daea7db933bc414c329d7 to before 2b4af99b44861646013821019dd13a4ac48c0219Affected 2fe0e8769df9fed5098daea7db933bc414c329d7 to before ce1b3a41e7964cb8dd56a702a95dd90ad27f51cdAffected 2fe0e8769df9fed5098daea7db933bc414c329d7 to before ab5bb7bbacf531de8e32912cc2e21f906113cee8Affected 2fe0e8769df9fed5098daea7db933bc414c329d7 to before 71d88c7453ec3d2ceff98e18ce4d6354abd3b5b6Affected 2fe0e8769df9fed5098daea7db933bc414c329d7 to before ee9d7a0e754568180a2f8ebc4aad226278a9116fAffected
LinuxLinux	5.0Affected before 5.0Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

2fe0e8769df9fed5098daea7db933bc414c329d7 to before 9ec5781879b4535ad59b5354b385825378e45618Affected
2fe0e8769df9fed5098daea7db933bc414c329d7 to before 2b4af99b44861646013821019dd13a4ac48c0219Affected
2fe0e8769df9fed5098daea7db933bc414c329d7 to before ce1b3a41e7964cb8dd56a702a95dd90ad27f51cdAffected
2fe0e8769df9fed5098daea7db933bc414c329d7 to before ab5bb7bbacf531de8e32912cc2e21f906113cee8Affected
2fe0e8769df9fed5098daea7db933bc414c329d7 to before 71d88c7453ec3d2ceff98e18ce4d6354abd3b5b6Affected
2fe0e8769df9fed5098daea7db933bc414c329d7 to before ee9d7a0e754568180a2f8ebc4aad226278a9116fAffected

LinuxLinux

5.0Affected
before 5.0Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.