CVE-2022-50415

Source
https://cve.org/CVERecord?id=CVE-2022-50415
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50415.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-50415
Downstream
Published
2025-09-18T16:03:58.836Z
Modified
2026-07-15T01:49:07.549032736Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
parisc: led: Fix potential null-ptr-deref in start_task()
Details

In the Linux kernel, the following vulnerability has been resolved:

parisc: led: Fix potential null-ptr-deref in start_task()

starttask() calls createsinglethread_workqueue() and not checked the ret value, which may return NULL. And a null-ptr-deref may happen:

starttask() createsinglethreadworkqueue() # failed, ledwq is NULL queuedelayedwork() queuedelayedwork_on() __queuedelayedwork() # warning here, but continue _queuework() # access wq->flags, null-ptr-deref

Check the ret value and return -ENOMEM if it is NULL.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50415.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3499495205a676d85fcc2f3c28e35ec9b43c47e3
Fixed
c6db0c32f39684c89c97bc1ba1c9c4249ca09e48
Fixed
fc6d0f65f22040c6cc8a5ce032bf90252629de50
Fixed
fc307b2905a3dd75c50a53b4d87ac9c912fb7c4e
Fixed
5e4500454d75dd249be4695d83afa3ba0724c37e
Fixed
3505c187b86136250b39e62c72a3a70435277af6
Fixed
ac838c663ba1fd6bff35a817fd89a47ab55e88e0
Fixed
77f8b628affaec692d83ad8bfa3520db8a0cc493
Fixed
67c98fec87ed76b1feb2ae810051afd88dfa9df6
Fixed
41f563ab3c33698bdfc3403c7c2e6c94e73681e4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50415.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.15
Fixed
4.9.337
Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.14.303
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.270
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.229
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.163
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.87
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.18
Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50415.json"