CVE-2022-50473

Source
https://cve.org/CVERecord?id=CVE-2022-50473
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50473.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50473
Downstream
Published
2025-10-04T15:16:34.859Z
Modified
2026-04-11T12:44:57.303199Z
Summary
cpufreq: Init completion before kobject_init_and_add()
Details

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: Init completion before kobjectinitand_add()

In cpufreqpolicyalloc(), it will call uninitialed completion in cpufreqsysfsrelease() when kobjectinitand_add() fails. And that will cause a crash such as the following page fault in complete:

BUG: unable to handle page fault for address: fffffffffffffff8 [..] RIP: 0010:complete+0x98/0x1f0 [..] Call Trace: kobjectput+0x1be/0x4c0 cpufreqonline.cold+0xee/0x1fd cpufreqadddev+0x183/0x1e0 subsysinterfaceregister+0x3f5/0x4e0 cpufreqregisterdriver+0x3b7/0x670 acpicpufreqinit+0x56c/0x1000 [acpicpufreq] dooneinitcall+0x13d/0x780 doinitmodule+0x1c3/0x630 loadmodule+0x6e67/0x73b0 _dosysfinitmodule+0x181/0x240 dosyscall64+0x35/0x80 entrySYSCALL64afterhwframe+0x63/0xcd

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50473.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4ebe36c94aed95de71a8ce6a6762226d31c938ee
Fixed
3cdd91a9163248935720927531066b74f57aa43b
Fixed
e379b88a8f8cffc99b318e028705ed9e3da0e1e0
Fixed
8fb4c98f20dfca1237de2e3dfdbe78d156784fd3
Fixed
d88540acfc7a17079021d866de914112c396edb1
Fixed
e7c0c943ed675b66d4bbb16c51c6a3bb58da047e
Fixed
5c51054896bcce1d33d39fead2af73fec24f40b6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e977b1477a6725868302957e6b5c330220391797

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50473.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.2.0
Fixed
5.4.229
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.163
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.87
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.18
Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50473.json"