Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-50415— parisc: led: Fix potential null-ptr-deref in start_task()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未检查create_singlethread_workqueue返回值，可能导致空指针取消引用。

AI Predicted 5.6 Difficulty: Moderate EPSS 0.16% · P6

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 20

VendorProduct Version RangeStatus
Linux Linux 3499495205a676d85fcc2f3c28e35ec9b43c47e3< c6db0c32f39684c89c97bc1ba1c9c4249ca09e48 affected
3499495205a676d85fcc2f3c28e35ec9b43c47e3< fc6d0f65f22040c6cc8a5ce032bf90252629de50 affected
3499495205a676d85fcc2f3c28e35ec9b43c47e3< fc307b2905a3dd75c50a53b4d87ac9c912fb7c4e affected
3499495205a676d85fcc2f3c28e35ec9b43c47e3< 5e4500454d75dd249be4695d83afa3ba0724c37e affected
3499495205a676d85fcc2f3c28e35ec9b43c47e3< 3505c187b86136250b39e62c72a3a70435277af6 affected
3499495205a676d85fcc2f3c28e35ec9b43c47e3< ac838c663ba1fd6bff35a817fd89a47ab55e88e0 affected
3499495205a676d85fcc2f3c28e35ec9b43c47e3< 77f8b628affaec692d83ad8bfa3520db8a0cc493 affected
3499495205a676d85fcc2f3c28e35ec9b43c47e3< 67c98fec87ed76b1feb2ae810051afd88dfa9df6 affected
… +12 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-50415

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
parisc: led: Fix potential null-ptr-deref in start_task()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: parisc: led: Fix potential null-ptr-deref in start_task() start_task() calls create_singlethread_workqueue() and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: start_task() create_singlethread_workqueue() # failed, led_wq is NULL queue_delayed_work() queue_delayed_work_on() __queue_delayed_work() # warning here, but continue __queue_work() # access wq->flags, null-ptr-deref Check the ret value and return -ENOMEM if it is NULL.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未检查create_singlethread_workqueue返回值，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 3499495205a676d85fcc2f3c28e35ec9b43c47e3 ~ c6db0c32f39684c89c97bc1ba1c9c4249ca09e48 -
Linux Linux 2.6.15 -

II. Public POCs for CVE-2022-50415

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-50415

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-09-18 · 121 CVEs total

CVE-2022-50410 9.8 CRITICAL NFSD: Protect against send buffer overflow in NFSv2 READ
CVE-2022-50401 9.8 CRITICAL nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
CVE-2023-53382 9.8 CRITICAL net/smc: Reset connection when trying to use SMCRv2 fails.
CVE-2022-50419 8.8 HIGH Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
CVE-2023-53431 8.8 HIGH scsi: ses: Handle enclosure with just a primary component gracefully
CVE-2023-53432 8.8 HIGH firewire: net: fix use after free in fwnet_finish_incoming_packet()
CVE-2023-53374 8.8 HIGH Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early
CVE-2022-50413 8.8 HIGH wifi: mac80211: fix use-after-free
CVE-2022-50386 8.8 HIGH Bluetooth: L2CAP: Fix user-after-free
CVE-2023-53372 8.2 HIGH sctp: fix a potential overflow in sctp_ifwdtsn_skip
CVE-2023-53387 7.8 HIGH scsi: ufs: core: Fix device management cmd timeout flow
CVE-2023-53429 7.8 HIGH btrfs: don't check PageError in __extent_writepage
CVE-2022-50399 7.8 HIGH media: atomisp: prevent integer overflow in sh_css_set_black_frame()
CVE-2023-53394 7.8 HIGH net/mlx5e: xsk: Fix crash on regular rq reactivation
CVE-2022-50417 7.8 HIGH drm/panfrost: Fix GEM handle creation ref-counting
CVE-2023-53373 7.8 HIGH crypto: seqiv - Handle EBUSY correctly
CVE-2023-53388 7.8 HIGH drm/mediatek: Clean dangling pointer on bind error path
CVE-2023-53426 7.8 HIGH xsk: Fix xsk_diag use-after-free error during socket cleanup
CVE-2023-53378 7.8 HIGH drm/i915/dpt: Treat the DPT BO as a framebuffer
CVE-2023-53386 7.8 HIGH Bluetooth: Fix potential use-after-free when clear keys

Showing top 20 of 121 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2022-50415

No comments yet

Leave a comment