CVE-2022-50722: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50722 is a NULL pointer dereference vulnerability in the Linux kernel's media: ipu3-imgu (Intel IPU3 Image Processing Unit) driver. The flaw exists in the active selection access path, where the driver incorrectly acquires pointers to active and try V4L2 subdev states before determining which one to use, leading to a NULL dereference when sd_state is NULL and passed to v4l2_subdev_get_try_crop() or similar functions. Affected Linux kernel versions include those from commit 0d346d2a6f54f up to the respective fix commits in stable branches. The vulnerability was published on December 24, 2025, and carries an estimated CVSS severity of Medium with an EPSS score of approximately 0.017% (Feedly, EUVD).

The root cause is a NULL pointer dereference (CWE-476) in the ipu3-imgu media driver within the Linux kernel. The driver first retrieves pointers to both the active and try V4L2 subdev states, and only afterward determines which pointer to use. A subsequent patch introduced a code path where sd_state can be NULL; when this NULL value is passed to v4l2_subdev_get_try_crop() or related functions, the kernel attempts to dereference it, triggering a kernel panic or crash. The vulnerability is local in nature, requiring access to the affected media device or driver interface to trigger. Fixes were applied across three stable kernel branches via commits b9eb3ab6f30b, 740717b756c1, and 5265cc1202a3 (EUVD, Feedly).

Successful exploitation of this vulnerability can cause a kernel NULL pointer dereference, resulting in a kernel panic and system crash, which directly impacts availability. Because the flaw resides in a kernel media driver, exploitation would require local access to the affected system and the relevant hardware (Intel IPU3 camera subsystem). There is no known evidence of confidentiality or integrity impact beyond the denial-of-service condition caused by the crash (Feedly, EUVD).

The Linux kernel maintainers have released fixes in stable branches: kernel 5.15.76 (commit b9eb3ab6f30b), kernel 6.0.6 (commit 740717b756c1), and kernel 6.1 (commit 5265cc1202a3). Users should update to a patched kernel version as soon as possible. SUSE Linux has also issued advisories (SUSE-2026-0263, SUSE-2026-0317, SUSE-2026-0411) addressing this vulnerability in their kernel packages (EUVD, Linux Security).