{"id":"CVE-2022-50244","title":"cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ncxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()\n\nIf device_register() fails in cxl_pci_afu|adapter(), the device\nis not added, device_unregister() can no…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 82e68432668ae75b4c814d160f6987ecb0681273","Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 82e5481428faf11c79b9c094dd24a1849bbf64ac","Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < c4b2e35df919d99bbbed033c2fa0b607f9f463b5","Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 361412dae1690d4b5df6f92fc943cdc773c95cbc","Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec","Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 22511eefa61db26e12c97dd7ada3071dbdfcb004","Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 139abd4c626a6f7ce02789ed5f73aa2256e0542b","Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339","Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 02cd3032b154fa02fdf90e7467abaeed889330b2","Linux 3.18"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:07:39.185984Z"},"published":"2025-09-15","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:10:30.561Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-50244","references":[{"url":"https://git.kernel.org/stable/c/82e68432668ae75b4c814d160f6987ecb0681273"},{"url":"https://git.kernel.org/stable/c/82e5481428faf11c79b9c094dd24a1849bbf64ac"},{"url":"https://git.kernel.org/stable/c/c4b2e35df919d99bbbed033c2fa0b607f9f463b5"},{"url":"https://git.kernel.org/stable/c/361412dae1690d4b5df6f92fc943cdc773c95cbc"},{"url":"https://git.kernel.org/stable/c/0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec"},{"url":"https://git.kernel.org/stable/c/22511eefa61db26e12c97dd7ada3071dbdfcb004"},{"url":"https://git.kernel.org/stable/c/139abd4c626a6f7ce02789ed5f73aa2256e0542b"},{"url":"https://git.kernel.org/stable/c/2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339"},{"url":"https://git.kernel.org/stable/c/02cd3032b154fa02fdf90e7467abaeed889330b2"}],"tags":["cve.org"],"epss":0.00163,"epssPercentile":0.0556,"ingestedAt":"2026-11-05T22:38:31.707Z","slug":"CVE-2022-50244","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()\n\nIf device_register() fails in cxl_pci_afu|adapter(), the device\nis not added, device_unregister() can not be called in the error\npath, otherwise it will cause a null-ptr-deref because of removing\nnot added device.\n\nAs comment of device_register() says, it should use put_device() to give\nup the reference in the error path. So split device_unregister() into\ndevice_del() and put_device(), then goes to put dev when register fails.\n\n## Affected\n\n- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 82e68432668ae75b4c814d160f6987ecb0681273`\n- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 82e5481428faf11c79b9c094dd24a1849bbf64ac`\n- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < c4b2e35df919d99bbbed033c2fa0b607f9f463b5`\n- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 361412dae1690d4b5df6f92fc943cdc773c95cbc`\n- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec`\n- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 22511eefa61db26e12c97dd7ada3071dbdfcb004`\n- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 139abd4c626a6f7ce02789ed5f73aa2256e0542b`\n- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339`\n- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 02cd3032b154fa02fdf90e7467abaeed889330b2`\n- `Linux 3.18`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}