CVE-2022-50439: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50439 affects the Linux kernel's ASoC (ALSA System on Chip) driver for the MediaTek MT8173 platform. The vulnerability was disclosed on October 1, 2025, and involves an IRQ handling issue where interrupts might be received before the system is ready to handle them (NVD).

The vulnerability occurs in the MT8173 audio driver when the device does not come straight from reset, potentially receiving an IRQ before the system is prepared to handle it. This results in an inability to handle kernel read operations from unreadable memory at virtual address 0x1e4, as evidenced by the call trace including regmapread and mt8173afeirqhandler functions. The issue has been assigned a CVSS 3.1 base score of 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) (RedHat).

The vulnerability can lead to system instability and potential kernel crashes when the affected hardware platform attempts to process audio interrupts before proper initialization. This primarily affects systems using the MediaTek MT8173 audio subsystem (NVD).

The vulnerability has been resolved in the Linux kernel through a patch that ensures IRQs are enabled only when pdata is ready. Various Linux distributions have incorporated these fixes, with Red Hat Enterprise Linux 9 and its kernel-rt variant being affected and patched (RedHat).