CVE-2022-50256 is a use-after-free vulnerability in the Linux kernel's drm/meson display driver, specifically affecting the handling of DRM bridges. This flaw occurs because bridges are not properly removed when the driver unbinds, leading to dangling references in the global bridge_list. When the driver is reloaded, these references can point to freed memory, causing a crash or potential privilege escalation. Rated with a CVSS score of 7.8 (High), this vulnerability has a local attack vector with low attack complexity, requiring local user privileges. Successful exploitation could lead to high impacts on confidentiality, integrity, and availability of the affected system. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, indicating a low level of public awareness or concern at this time.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 4.10, < 5.19.17CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.0, < 6.0.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.