Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2022-50356— net: sched: sfb: fix null pointer access issue when sfb_init() fails

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确处理sfb_init失败情况，可能导致空指针取消引用。

AI Predicted 7.8 Difficulty: Easy EPSS 0.21% · P10

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 10

VendorProduct Version RangeStatus
Linux Linux e13e02a3c68d899169c78d9a18689bd73491d59a< ded86c4191a3c17f8200d17a7d8a6f63b74554ae affected
e13e02a3c68d899169c78d9a18689bd73491d59a< c2e1e59d59fafe297779ceae1fe0e6fbebc3e745 affected
e13e02a3c68d899169c78d9a18689bd73491d59a< 723399af2795fb95687a531c9480464b5f489333 affected
e13e02a3c68d899169c78d9a18689bd73491d59a< 2a3fc78210b9f0e85372a2435368962009f480fc affected
2.6.39 affected
< 2.6.39 unaffected
5.10.152≤ 5.10.* unaffected
5.15.76≤ 5.15.* unaffected
… +2 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-50356

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
net: sched: sfb: fix null pointer access issue when sfb_init() fails
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: sched: sfb: fix null pointer access issue when sfb_init() fails When the default qdisc is sfb, if the qdisc of dev_queue fails to be inited during mqprio_init(), sfb_reset() is invoked to clear resources. In this case, the q->qdisc is NULL, and it will cause gpf issue. The process is as follows: qdisc_create_dflt() sfb_init() tcf_block_get() --->failed, q->qdisc is NULL ... qdisc_put() ... sfb_reset() qdisc_reset(q->qdisc) --->q->qdisc is NULL ops = qdisc->ops The following is the Call Trace information: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] RIP: 0010:qdisc_reset+0x2b/0x6f0 Call Trace: <TASK> sfb_reset+0x37/0xd0 qdisc_reset+0xed/0x6f0 qdisc_destroy+0x82/0x4c0 qdisc_put+0x9e/0xb0 qdisc_create_dflt+0x2c3/0x4a0 mqprio_init+0xa71/0x1760 qdisc_create+0x3eb/0x1000 tc_modify_qdisc+0x408/0x1720 rtnetlink_rcv_msg+0x38e/0xac0 netlink_rcv_skb+0x12d/0x3a0 netlink_unicast+0x4a2/0x740 netlink_sendmsg+0x826/0xcc0 sock_sendmsg+0xc5/0x100 ____sys_sendmsg+0x583/0x690 ___sys_sendmsg+0xe8/0x160 __sys_sendmsg+0xbf/0x160 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f2164122d04 </TASK>
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确处理sfb_init失败情况，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux e13e02a3c68d899169c78d9a18689bd73491d59a ~ ded86c4191a3c17f8200d17a7d8a6f63b74554ae -
Linux Linux 2.6.39 -

II. Public POCs for CVE-2022-50356

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-50356

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-09-17 · 56 CVEs total

CVE-2023-53338 9.8 CRITICAL lwt: Fix return values of BPF xmit ops
CVE-2023-53360 9.8 CRITICAL NFSv4.2: Rework scratch handling for READ_PLUS (again)
CVE-2022-50363 9.8 CRITICAL skmsg: pass gfp argument to alloc_sk_msg()
CVE-2022-50373 9.8 CRITICAL fs: dlm: fix race in lowcomms
CVE-2023-53358 8.8 HIGH ksmbd: fix racy issue under cocurrent smb2 tree disconnect
CVE-2022-50368 7.8 HIGH drm/msm/dsi: fix memory corruption with too many bridges
CVE-2022-50367 7.8 HIGH fs: fix UAF/GPF bug in nilfs_mdt_destroy
CVE-2023-53340 7.8 HIGH net/mlx5: Collect command failures data only for known commands
CVE-2022-50362 7.8 HIGH dmaengine: hisilicon: Add multi-thread support for a DMA channel
CVE-2023-53354 7.8 HIGH skbuff: skb_segment, Call zero copy functions before using skbuff frags
CVE-2022-50355 7.8 HIGH staging: vt6655: fix some erroneous memory clean-up loops
CVE-2022-50354 7.8 HIGH drm/amdkfd: Fix kfd_process_device_init_vm error handling
CVE-2022-50365 7.5 HIGH skbuff: Account for tail adjustment during pull operations
CVE-2023-53335 7.5 HIGH RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
CVE-2022-50374 Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
CVE-2022-50353 mmc: wmt-sdmmc: fix return value check of mmc_add_host()
CVE-2023-53337 nilfs2: do not write dirty data after degenerating to read-only
CVE-2022-50372 cifs: Fix memory leak when build ntlmssp negotiate blob failed
CVE-2022-50371 led: qcom-lpg: Fix sleeping in atomic
CVE-2023-53336 media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings

Showing top 20 of 56 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2022-50356

No comments yet

Leave a comment