CVE-2022-50704: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50704 is a use-after-free vulnerability in the Linux kernel's USB gadget subsystem, specifically triggered during USB configuration switching (e.g., from RNDIS to another config). The flaw occurs when the hardware does not support the ->pullup callback or encounters a fault, causing the callback to fail and resulting in a system panic. It was published on December 24, 2025, and affects the Linux kernel. The CVSS category is estimated as Medium (Feedly, CVE.org).

The root cause is a use-after-free condition (CWE-416) in the Linux kernel's USB gadget layer. During a USB config switch, if the ->pullup callback fails — either because the hardware does not support it or due to a low-probability hardware fault — the gadget driver may attempt to access already-freed memory. The vulnerability manifests across a sequence of operations: writing none to the UDC configfs entry triggers gether_disconnect, followed by removal of the function link (rndis_deregister, rndis_free), and finally removal of the function directory triggers rndis_close → eth_stop → unregister_netdev → gether_cleanup on already-freed objects, causing a kernel panic. The fix ensures gadget drivers can be unloaded regardless of hardware behavior (Feedly, CVE.org).

Successful exploitation of this vulnerability causes a kernel panic (system crash), resulting in a complete loss of availability for the affected system. The vulnerability is triggered locally during USB gadget configuration changes and does not directly expose confidentiality or integrity, but a system crash can disrupt services and potentially be leveraged as a denial-of-service primitive on embedded or mobile devices using Linux USB gadget functionality (Feedly).

The Linux kernel upstream has addressed this vulnerability via patches committed to the stable kernel tree (commits 30e926aa835a, 99a58ac42d9b, and afdc12887f2b on kernel.org). SUSE has released kernel updates addressing this CVE (e.g., SUSE advisories SUSE-2026:0263-1, SUSE-2026:0317-1, and SUSE-2026:0411-1). Users should update to a patched kernel version provided by their Linux distribution. As a workaround, avoiding dynamic USB gadget configuration switching on affected hardware may reduce exposure (Feedly, Linux Security SUSE).