---
id: CVE-2022-50244
title: 'cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()

  If device_register() fails in cxl_pci_afu|adapter(), the device
  is not added, device_unregister() can no…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 <
    82e68432668ae75b4c814d160f6987ecb0681273
  - >-
    Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 <
    82e5481428faf11c79b9c094dd24a1849bbf64ac
  - >-
    Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 <
    c4b2e35df919d99bbbed033c2fa0b607f9f463b5
  - >-
    Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 <
    361412dae1690d4b5df6f92fc943cdc773c95cbc
  - >-
    Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 <
    0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec
  - >-
    Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 <
    22511eefa61db26e12c97dd7ada3071dbdfcb004
  - >-
    Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 <
    139abd4c626a6f7ce02789ed5f73aa2256e0542b
  - >-
    Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 <
    2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339
  - >-
    Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 <
    02cd3032b154fa02fdf90e7467abaeed889330b2
  - Linux 3.18
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:07:39.185984Z'
published: '2025-09-15'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:10:30.561Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50244'
references:
  - url: 'https://git.kernel.org/stable/c/82e68432668ae75b4c814d160f6987ecb0681273'
  - url: 'https://git.kernel.org/stable/c/82e5481428faf11c79b9c094dd24a1849bbf64ac'
  - url: 'https://git.kernel.org/stable/c/c4b2e35df919d99bbbed033c2fa0b607f9f463b5'
  - url: 'https://git.kernel.org/stable/c/361412dae1690d4b5df6f92fc943cdc773c95cbc'
  - url: 'https://git.kernel.org/stable/c/0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec'
  - url: 'https://git.kernel.org/stable/c/22511eefa61db26e12c97dd7ada3071dbdfcb004'
  - url: 'https://git.kernel.org/stable/c/139abd4c626a6f7ce02789ed5f73aa2256e0542b'
  - url: 'https://git.kernel.org/stable/c/2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339'
  - url: 'https://git.kernel.org/stable/c/02cd3032b154fa02fdf90e7467abaeed889330b2'
tags:
  - cve.org
epss: 0.00163
epssPercentile: 0.0556
ingestedAt: '2026-11-05T22:38:31.707Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()

If device_register() fails in cxl_pci_afu|adapter(), the device
is not added, device_unregister() can not be called in the error
path, otherwise it will cause a null-ptr-deref because of removing
not added device.

As comment of device_register() says, it should use put_device() to give
up the reference in the error path. So split device_unregister() into
device_del() and put_device(), then goes to put dev when register fails.

## Affected

- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 82e68432668ae75b4c814d160f6987ecb0681273`
- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 82e5481428faf11c79b9c094dd24a1849bbf64ac`
- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < c4b2e35df919d99bbbed033c2fa0b607f9f463b5`
- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 361412dae1690d4b5df6f92fc943cdc773c95cbc`
- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 0f63c0ddc2ea20d783d29243f4dbe0f9e95dfdec`
- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 22511eefa61db26e12c97dd7ada3071dbdfcb004`
- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 139abd4c626a6f7ce02789ed5f73aa2256e0542b`
- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 2f5fd31b2f24b9b8a80ab566fd8c4e1e94cb4339`
- `Linux >= f204e0b8cedd7da1dfcfd05ed6b7692737e24029 < 02cd3032b154fa02fdf90e7467abaeed889330b2`
- `Linux 3.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.