CVE-2022-50628

A flaw was found in the GUD (Generic USB Display) driver in the Linux kernel. Uninitialized iosys_map variables on the stack contain garbage values in their is_iomem boolean field. When iosys_map_clear() checks this field, UBSAN flags it as an invalid boolean value, indicating potential undefined behavior.

While UBSAN reports this as undefined behavior, practical exploitation is unlikely. The issue manifests as a warning rather than memory corruption. GUD is a niche driver for USB-connected displays.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the gud module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.