In the Linux kernel, the following vulnerability has been resolved:

of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()

When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will
be NULL, and strcmp() will cause null pointer dereference.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
2fe0e8769df9fed5098daea7db933bc414c329d7 affected < 9ec5781879b4535ad59b5354b385825378e45618
2fe0e8769df9fed5098daea7db933bc414c329d7 affected < 2b4af99b44861646013821019dd13a4ac48c0219
2fe0e8769df9fed5098daea7db933bc414c329d7 affected < ce1b3a41e7964cb8dd56a702a95dd90ad27f51cd
2fe0e8769df9fed5098daea7db933bc414c329d7 affected < ab5bb7bbacf531de8e32912cc2e21f906113cee8
2fe0e8769df9fed5098daea7db933bc414c329d7 affected < 71d88c7453ec3d2ceff98e18ce4d6354abd3b5b6
2fe0e8769df9fed5098daea7db933bc414c329d7 affected < ee9d7a0e754568180a2f8ebc4aad226278a9116f
Linux Linux affected
Version Status Constraints
5.0 affected —
0 unaffected < 5.0
5.4.229 unaffected ≤ 5.4.*
5.10.163 unaffected ≤ 5.10.*
5.15.86 unaffected ≤ 5.15.*
6.0.16 unaffected ≤ 6.0.*
6.1.2 unaffected ≤ 6.1.*
6.2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/2b4af99b44861646013821019dd13a4ac48c0219 cve-icon cve-icon
https://git.kernel.org/stable/c/71d88c7453ec3d2ceff98e18ce4d6354abd3b5b6 cve-icon cve-icon
https://git.kernel.org/stable/c/9ec5781879b4535ad59b5354b385825378e45618 cve-icon cve-icon
https://git.kernel.org/stable/c/ab5bb7bbacf531de8e32912cc2e21f906113cee8 cve-icon cve-icon
https://git.kernel.org/stable/c/ce1b3a41e7964cb8dd56a702a95dd90ad27f51cd cve-icon cve-icon
https://git.kernel.org/stable/c/ee9d7a0e754568180a2f8ebc4aad226278a9116f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123023-CVE-2022-50875-4def@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50875 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50875 cve-icon
History

Wed, 31 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 30 Dec 2025 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will be NULL, and strcmp() will cause null pointer dereference.
Title of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-30T12:23:16.108Z

Reserved: 2025-12-30T12:06:07.137Z

Link: CVE-2022-50875

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:02.503

Modified: 2025-12-31T20:43:05.160

Link: CVE-2022-50875

cve-icon Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2022-50875 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.