CVE-2022-50819: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50819 is a null pointer dereference vulnerability in the Linux kernel's udmabuf driver (drivers/dma-buf/udmabuf.c). When userspace attempts to map a dmabuf and the creation of the scatter-gather (sg) table fails (e.g., due to an out-of-memory condition), ubuf->sg is not reset to NULL. This causes a general protection fault when the dmabuf file descriptor is subsequently closed, as release_udmabuf attempts to free the invalid sg table pointer. The vulnerability was published on December 30, 2025, and affects the Linux kernel (Feedly). The EPSS score is approximately 0.018% (very low), and no CVSS score has been publicly assigned at this time.

The root cause is improper error handling in the udmabuf driver (CWE-476: NULL Pointer Dereference / improper cleanup on error path). When dma_buf_map_attachment() or the sg table creation fails during a userspace mmap() call, the partially initialized ubuf->sg pointer is left in an indeterminate state rather than being explicitly set to NULL. When the dmabuf fd is later closed, release_udmabuf() calls put_sg_table(), which invokes dma_unmap_sgtable() on the invalid pointer, triggering a kernel general protection fault. The fix sets ubuf->sg = NULL upon sg table creation failure, preventing the erroneous free. The crash was originally reported by syzbot on kernel version 5.19.0-syzkaller (Feedly). Patches are available in the stable kernel tree at multiple commits (e.g., 9861e43f, bbe2f6f9, d9c04a1b, dfbed8c9, fc285549).

Successful triggering of this vulnerability causes a kernel general protection fault (crash), resulting in a denial of service (system crash or kernel panic) on the affected host. The impact is limited to availability — confidentiality and integrity are not directly affected. An unprivileged local user with access to the udmabuf device and the ability to trigger OOM conditions during dmabuf mapping could crash the kernel (Feedly).

Apply the upstream Linux kernel patches that set ubuf->sg = NULL on sg table creation failure in drivers/dma-buf/udmabuf.c. The fix is available in multiple stable kernel commits: 9861e43f097a, bbe2f6f90310, d9c04a1b7a15, dfbed8c92eb8, and fc285549f454. Linux distribution vendors such as SUSE have issued advisories incorporating this fix (Linux Security). Users should update to a patched kernel version provided by their distribution as soon as possible. As a temporary workaround, restricting unprivileged access to the udmabuf device node can reduce exposure.

The vulnerability received routine coverage from security aggregators and Linux distribution advisories, including a SUSE kernel advisory in early 2026 (Linux Security). No notable researcher commentary or significant social media discussion has been identified beyond standard vulnerability database entries.