CVE-2022-50786: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50786 is a NULL pointer dereference vulnerability in the Linux kernel's media: s5p-mfc driver. During an error condition on the CLOSE_INSTANCE command, ctx_work_bits was not being cleared, causing a subsequent MFC execution to dereference a NULL pointer and trigger a kernel panic. The vulnerability was published on December 30, 2025, and affects the Linux kernel across multiple stable branches. No CVSS score has been assigned by NVD at this time, and the record is not currently prioritized for NVD enrichment (Feedly, NVD).

The root cause is improper error handling in the s5p-mfc media driver (Samsung MFC hardware video codec driver) within the Linux kernel. When a CLOSE_INSTANCE command fails, the driver does not clear the ctx_work_bits bitmask for the affected context. On subsequent MFC scheduler execution, the stale work bit causes the driver to attempt to operate on an already-freed or invalid context, resulting in a NULL pointer dereference (CWE-476) and kernel panic. The fix ensures ctx_work_bits is always cleared during error handling, regardless of command outcome (NVD, Feedly).

Successful triggering of this vulnerability causes a kernel panic, resulting in a complete system crash and denial of service. The impact is limited to availability — there is no evidence of confidentiality or integrity compromise. Systems using Samsung Exynos SoCs with the s5p-mfc hardware video codec (common in embedded Linux and certain Android-based devices) are at risk of unplanned reboots or persistent instability if the error condition is repeatedly triggered (NVD).

The Linux kernel maintainers have released patches across multiple stable branches addressing this issue. The fixes are available in the following kernel.org commits: 09c1fbbe, 12242bd1, 64007540, 8ff64edf, bd1b72f0, d3f3c2fe, and ff27800c. Administrators should update to a patched kernel version that includes these commits. No configuration-based workaround is known; upgrading the kernel is the recommended remediation (NVD).