PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2022-50332

CVE-2022-50332

kernel: Linux kernel: Denial of Service due to improper PCI device handling in aperture driver

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 15, 2025

Updated · June 30, 2026

Description

A flaw was found in the Linux kernel's aperture driver. This vulnerability occurs because the sysfb_disable() function is not called before removing PCI devices. A local user could exploit this by allowing the simpledrm driver to bind to simple-framebuffer devices after the hardware driver has taken control. This interference between drivers can lead to undefined system behavior and a Denial of Service (DoS).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-820 · Missing Synchronization