CVE-2022-50229

A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) Behringer BCD2000 driver. A local user could exploit this vulnerability to achieve privilege escalation or cause a Denial of Service (DoS) by crashing the system. This issue occurs when device initialization fails during the probing process, improperly freeing active USB communication resources before terminating them, which leads to a use-after-free condition.

This vulnerability is rated as Moderate because triggering the flaw requires either physical access to attach a specialized Behringer BCD2000 USB controller or the ability to emulate such hardware within a virtual guest. In standard Red Hat Enterprise Linux server environments, this specialized audio hardware is rarely present. Furthermore, triggering the condition requires inducing an initialization failure during device probing, which significantly limits the attack surface primarily to local denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.