CVE-2022-50374

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-50374
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50374.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50374
Downstream
Related
Published
2025-09-17T14:56:28.974Z
Modified
2026-03-20T11:47:25.472927Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_{ldisc,serdev}: check percpuinitrwsem() failure

syzbot is reporting NULL pointer dereference at hciuartttyclose() [1], for rcusyncenter() is called without rcusyncinit() due to hciuartttyopen() ignoring percpuinitrwsem() failure.

While we are at it, fix that hciuartregisterdevice() ignores percpuinitrwsem() failure and hciuartunregisterdevice() does not call percpufreerwsem().

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50374.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Fixed
d7cc0d51ffcbfd1caaa809fcf9cff05c46d0fb4d
Fixed
b8917dce2134739b39bc0a5648b18427f2cad569
Fixed
75b2c71ea581c7bb1303860d89366a42ad0506d2
Fixed
98ce10f3f345e61fc6c83bff9cd11cda252b05ac
Fixed
3124d320c22f3f4388d9ac5c8f37eaad0cefd6b1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f6ec33f6bd3723a8146768106434ef6ab3d9d990
Last affected
4a53c4e84ace1bc75157a7281af3fe8f5b19d08c

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50374.json"