CVE-2022-50558

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-50558
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50558.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-50558
Downstream
Published
2025-10-22T13:23:18.717Z
Modified
2025-11-19T20:37:04.022660Z
Summary
regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode
Details

In the Linux kernel, the following vulnerability has been resolved:

regmap-irq: Use the new numconfigregs property in regmapaddirqchipfwnode

Commit faa87ce9196d ("regmap-irq: Introduce config registers for irq types") added the numconfigregs, then commit 9edd4f5aee84 ("regmap-irq: Deprecate type registers and virtual registers") suggested to replace numtypereg with it. However, regmapaddirqchipfwnode wasn't modified to use the new property. Later on, commit 255a03bb1bb3 ("ASoC: wcd9335: Convert irq chip to config regs") removed the old numtypereg property from the WCD9335 driver's struct regmapirqchip, causing a null pointer dereference in regmapirqsettype when it tried to index d->typebuf as it was never allocated in regmapaddirqchipfwnode:

[ 39.199374] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000

[ 39.200006] Call trace: [ 39.200014] regmapirqsettype+0x84/0x1c0 [ 39.200026] _irqsettrigger+0x60/0x1c0 [ 39.200040] _setupirq+0x2f4/0x78c [ 39.200051] requestthreadedirq+0xe8/0x1a0

Use numconfigregs in regmapaddirqchipfwnode instead of numtypereg, and fall back to it if numconfigregs isn't defined to maintain backward compatibility.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
faa87ce9196dbb074d75bd4aecb8bacf18f19b4e
Fixed
57bb34330c0fc70bb4ab96399a3c1b80e73e9d49
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
faa87ce9196dbb074d75bd4aecb8bacf18f19b4e
Fixed
961db32e52f4d34a9a95939a30393fd190397f84
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
faa87ce9196dbb074d75bd4aecb8bacf18f19b4e
Fixed
84498d1fb35de6ab71bdfdb6270a464fb4a0951b

Affected versions

v5.*

v5.19
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.14
v6.0.15
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.8
v6.0.9
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.0.16
Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.2