CVE-2022-50733

Not scored yetLast modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: idmouse: fix an uninit-value in idmouse_open

In idmouse_create_image, if any ftip_command fails, it will go to the reset label. However, this leads to the data in bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check for valid image incurs an uninitialized dereference.

Fix this by moving the check before reset label since this check only be valid if the data after bulk_in_buffer[HEADER] has concrete data.

Note that this is found by KMSAN, so only kernel compilation is tested.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 4244f72436ab77c3c29a6447af81734ab3925d85, < b3304a6df957cc89a0590cb505388d659bf3db4c; >= 4244f72436ab77c3c29a6447af81734ab3925d85, < 7dad42032f68718259590b0cc7654e9a95ff9762; >= 4244f72436ab77c3c29a6447af81734ab3925d85, < f589b667567fde4f81d6e6c40f42b9f2224690ea; >= 4244f72436ab77c3c29a6447af81734ab3925d85, < 1eae30c0113dde7522088231584d62415011a035; >= 4244f72436ab77c3c29a6447af81734ab3925d85, < b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54; >= 4244f72436ab77c3c29a6447af81734ab3925d85, < 20b8c456df584ebb2387dc23d40ebe4ff334417c; >= 4244f72436ab77c3c29a6447af81734ab3925d85, < 6163a5ae097bc78fa26c243fb384537e25610fd7; >= 4244f72436ab77c3c29a6447af81734ab3925d85, < adad163d1cff248a5df9f7cec50158e6ca89f33b; >= 4244f72436ab77c3c29a6447af81734ab3925d85, < bce2b0539933e485d22d6f6f076c0fcd6f185c4c
LinuxLinux2.6.13

References

Timeline

Published
Dec 24, 2025
Last modified
Nov 10, 2026
NVD status
Deferred

Related CVEs from 2022

CVE-2022-50734In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc mCVE-2022-50735In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76u_status_worker if the device is not runningCVE-2022-507367.1In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix immediate work request flush to completion queue CorrectCVE-2022-507377.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate index root when initialize NTFS security This enhanCVE-2022-50738In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix an iotlb memory leak Before commit 3d5698793897 ("vhosCVE-2022-50739In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add null pointer check for inode operations This adds a saniCVE-2022-50740In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_CVE-2022-50741In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Disable useless interrupt to avoid kernel panic ThereCVE-2022-50742In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible refcount leak in afu_ioctl() eventfd_ctx_put CVE-2022-50743In the Linux kernel, the following vulnerability has been resolved: erofs: Fix pcluster memleak when its block address is zero syzkaller rCVE-2022-50744In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs DCVE-2022-507457.8In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix device_node use after free At probe t
CVE-2022-50733: Unscored | Vulnix