CVE-2022-50419

Source
https://cve.org/CVERecord?id=CVE-2022-50419
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50419.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-50419
Downstream
Related
Published
2025-09-18T16:04:02.152Z
Modified
2026-04-02T08:28:29.431185Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times

device_add shall not be called multiple times as stated in its documentation:

'Do not call this routine or device_register() more than once for any device structure'

Syzkaller reports a bug as follows [1]: ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:33! invalid opcode: 0000 [#1] PREEMPT SMP KASAN [...] Call Trace: <TASK> _listadd include/linux/list.h:69 [inline] listaddtail include/linux/list.h:102 [inline] kobjksetjoin lib/kobject.c:164 [inline] kobjectaddinternal+0x18f/0x8f0 lib/kobject.c:214 kobjectaddvarg lib/kobject.c:358 [inline] kobjectadd+0x150/0x1c0 lib/kobject.c:410 deviceadd+0x368/0x1e90 drivers/base/core.c:3452 hciconnaddsysfs+0x9b/0x1b0 net/bluetooth/hcisysfs.c:53 hcilecisestabilishedevt+0x57c/0xae0 net/bluetooth/hcievent.c:6799 hcilemetaevt+0x2b8/0x510 net/bluetooth/hcievent.c:7110 hcieventfunc net/bluetooth/hcievent.c:7440 [inline] hcieventpacket+0x63d/0xfd0 net/bluetooth/hcievent.c:7495 hcirxwork+0xae7/0x1230 net/bluetooth/hcicore.c:4007 processonework+0x991/0x1610 kernel/workqueue.c:2289 workerthread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 retfromfork+0x1f/0x30 arch/x86/entry/entry64.S:306 </TASK>

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50419.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b219e3ac66183fc9771b94af931fb5fd41d586ec
Fixed
4bcefec3636208b4c97536b26014d5935d5c10a0
Fixed
6144423712d570247b8ca26e50a277c30dd13702
Fixed
671fee73e08ff415d36a7c16bdf238927df83884
Fixed
6e85d2ad958c6f034b1b158d904019869dbb3c81
Fixed
7b674dce4162bb46d396586e30e4653427023875
Fixed
3423a50fa018e88aed4c900d59c3c8334d8ad583
Fixed
ef055094df4c10b73cfe67c8d43f9de1fb608a8b
Fixed
1b6c89571f453101251201f0fad1c26f7256e937
Fixed
448a496f760664d3e2e79466aa1787e6abc922b5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50419.json"