CVE-2022-50447

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50447

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync When attempting to connect multiple ISO sockets without using DEFER_SETUP may result in the following crash: BUG: KASAN: null-ptr-deref in hci_create_cis_sync+0x18b/0x2b0 Read of size 2 at addr 0000000000000036 by task kworker/u3:1/50 CPU: 0 PID: 50 Comm: kworker/u3:1 Not tainted 6.0.0-rc7-02243-gb84a13ff4eda #4373 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-1.fc36 04/01/2014 Workqueue: hci0 hci_cmd_sync_work Call Trace: <TASK> dump_stack_lvl+0x19/0x27 kasan_report+0xbc/0xf0 ? hci_create_cis_sync+0x18b/0x2b0 hci_create_cis_sync+0x18b/0x2b0 ? get_link_mode+0xd0/0xd0 ? __ww_mutex_lock_slowpath+0x10/0x10 ? mutex_lock+0xe0/0xe0 ? get_link_mode+0xd0/0xd0 hci_cmd_sync_work+0x111/0x190 process_one_work+0x427/0x650 worker_thread+0x87/0x750 ? process_one_work+0x650/0x650 kthread+0x14e/0x180 ? kthread_exit+0x50/0x50 ret_from_fork+0x22/0x30 </TASK>

References
Link Resource
https://git.kernel.org/stable/c/09a3b0c9c7c6b10587fbb610b718014703cff341 Patch
https://git.kernel.org/stable/c/50757a259ba78c4e938b5735e76ffec6cd0c942e Patch
https://git.kernel.org/stable/c/a190cd9dc62d6ebeb679c1abe9dda4162dfefc84 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

16 Jan 2026, 19:50

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-476
References () https://git.kernel.org/stable/c/09a3b0c9c7c6b10587fbb610b718014703cff341 - () https://git.kernel.org/stable/c/09a3b0c9c7c6b10587fbb610b718014703cff341 - Patch
References () https://git.kernel.org/stable/c/50757a259ba78c4e938b5735e76ffec6cd0c942e - () https://git.kernel.org/stable/c/50757a259ba78c4e938b5735e76ffec6cd0c942e - Patch
References () https://git.kernel.org/stable/c/a190cd9dc62d6ebeb679c1abe9dda4162dfefc84 - () https://git.kernel.org/stable/c/a190cd9dc62d6ebeb679c1abe9dda4162dfefc84 - Patch

02 Oct 2025, 19:12

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-01 12:15

Updated : 2026-01-16 19:50

NVD link : CVE-2022-50447

Mitre link : CVE-2022-50447

CVE.ORG link : CVE-2022-50447

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference