01 Record

CVE-2022-50317

drm/bridge: megachips: Fix a null pointer dereference bug

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

drm/bridge: megachips: Fix a null pointer dereference bug

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 5.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-15 14:48Z1 YR AGO

Last updated

2026-05-23 15:24Z5 MO AGO

Reserved

2025-09-15

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

4da0dc43ff10eaa4517b31879a04efb06cf896f6495c771e0d7f9f55c9477ba3

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux7649972d97fb98578fbc4a351416cf72895e7c4d to < aaa512ad1e59f2edf8a9e4f2b167a44b24670679, 16e3827904932eccfba0915f0c93b519de3536ac to < 5bc20bafcd87ba0858ab772cefc7047cb51bc249, 50ad94f8654a53ec9ca3604a7a23cbaf166e0119 to < 1daf69228e310938177119c4eadcd30fc75c81e0, b8d10f601f226f055df8b5368d7ea7f369136cd5 to < 877e92e9b1bdeb580b31a46061005936be902cd4, 405856460d3e7aefb7c1aef047ec88fc4ef2e2a5 to < 4610e7a4111fa3f3ce27c09d6d94008c55f1cd31, 11632d4aa2b3f126790e81a4415d6c23103cf8bb to < 21764467ab396d9f08921e0a5ffa1214244e1ad9, 11632d4aa2b3f126790e81a4415d6c23103cf8bb to < 7371fad5cfe6eada6bb5523c895fd6074b15c2b9, 11632d4aa2b3f126790e81a4415d6c23103cf8bb to < 1ff673333d46d2c1b053ebd0c1c7c7c79e36943e, e449461989f0674f188d30494ffd3f5ba74c1a05, 4.14.263 to < 4.14.296, 4.19.226 to < 4.19.262, 5.4.174 to < 5.4.220, 5.10.94 to < 5.10.150, 5.15.17 to < 5.15.75, 5.16.3 to < 5.17, 5.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/aaa512ad1e59f2edf8a9e4f2b167a44b24670679
git.kernel.orghttps://git.kernel.org/stable/c/5bc20bafcd87ba0858ab772cefc7047cb51bc249
git.kernel.orghttps://git.kernel.org/stable/c/1daf69228e310938177119c4eadcd30fc75c81e0
git.kernel.orghttps://git.kernel.org/stable/c/877e92e9b1bdeb580b31a46061005936be902cd4
git.kernel.orghttps://git.kernel.org/stable/c/4610e7a4111fa3f3ce27c09d6d94008c55f1cd31
git.kernel.orghttps://git.kernel.org/stable/c/21764467ab396d9f08921e0a5ffa1214244e1ad9
git.kernel.orghttps://git.kernel.org/stable/c/7371fad5cfe6eada6bb5523c895fd6074b15c2b9
git.kernel.orghttps://git.kernel.org/stable/c/1ff673333d46d2c1b053ebd0c1c7c7c79e36943e

07 Fixed in

Debian 12

linux
Fixed in 6.0.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.0.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.0.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.