5.5

CVE-2022-50272: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2022-50272DEBIAN-CVE-2022-50272
Published 15-09-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2022-50272 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5.2% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.16%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10 · Related 8
RHSA-2023:6583RHSA-2024:0724SUSE-SU-2025:03613-1SUSE-SU-2025:03614-1SUSE-SU-2025:03615-1SUSE-SU-2025:03626-1

Timeline

  1. 15-09-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() Wei Chen reports a kernel bug as blew: general protection fault, probably for non-canonical address KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] ... Call Trace: <TASK> __i2c_transfer+0x77e/0x1930 drivers/i2c/i2c-core-base.c:2109 i2c_transfer+0x1d5/0x3d0 drivers/i2c/i2c-core-base.c:2170 i2cdev_ioctl_rdwr+0x393/0x660 drivers/i2c/i2c-dev.c:297 i2cdev_ioctl+0x75d/0x9f0 drivers/i2c/i2c-dev.c:458 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd834a8bded In az6027_i2c_xfer(), if msg[i].addr is 0x99, a null-ptr-deref will caused when accessing msg[i].buf. For msg[i].len is 0 and msg[i].buf is null. Fix this by checking msg[i].len in az6027_i2c_xfer().

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.16%

Chance of exploitation in the next 30 days

Percentile

5%

Versus all other CVEs

30-day change

0.00 pp

From 0.16% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu120 products
  • linuxAll versions (No fix recorded) | < 4.4.0-241.275 | < 4.15.0-208.220 | < 5.4.0-144.161 | < 5.15.0-69.76
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1119.125 | < 4.4.0-1157.172 | < 4.15.0-1153.166 | < 5.4.0-1097.105 | < 5.15.0-1033.37
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 76f9a820c8672ada12ffa0903652c9e6f2429462, < 2b6a8a1a32746981044e7ab06649c804acb4068a | ≥ 76f9a820c8672ada12ffa0903652c9e6f2429462, < c712d1ccbfb787620422b437a5b8fac0802547bd | ≥ 76f9a820c8672ada12ffa0903652c9e6f2429462, < 7abfe467cd685f5da7ecb415441e45e3e4e2baa8 | ≥ 76f9a820c8672ada12ffa0903652c9e6f2429462, < 8b256d23361c51aa4b7fdb71176c1ca50966fb39 | ≥ 76f9a820c8672ada12ffa0903652c9e6f2429462, < 559891d430e3f3a178040c4371ed419edbfa7d65 | ≥ 76f9a820c8672ada12ffa0903652c9e6f2429462, < 210fcf64be4db82c0e190e74b5111e4eef661a7a | ≥ 76f9a820c8672ada12ffa0903652c9e6f2429462, < 6fbc44731a4665cbe92a5090e9804a388a72214b | ≥ 76f9a820c8672ada12ffa0903652c9e6f2429462, < 6b60cf73a931af34b7a0a3f467a79d9fe0df2d70 | ≥ 76f9a820c8672ada12ffa0903652c9e6f2429462, < 0ed554fd769a19ea8464bb83e9ac201002ef74ad | 2.6.34
  • linux_kernel≥ 2.6.34, < 4.9.337 | ≥ 4.10, < 4.14.303 | ≥ 4.15, < 4.19.270 | ≥ 4.20, < 5.4.229 | ≥ 5.5, < 5.10.163 | ≥ 5.11, < 5.15.86 | ≥ 5.16, < 6.0.16 | ≥ 6.1, < 6.1.2
Debian1 product
  • linux< 6.1.4-1

3 vendors · 123 products

References

13 links
Show all 13 references