CVE-2022-50826: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50826 is a NULL pointer dereference vulnerability in the Linux kernel's IPU3 Image Processing Unit (ipu3-imgu) driver, specifically in the imgu_subdev_set_selection() function. The flaw was publicly disclosed on December 30, 2025, and affects Linux kernel versions from 5.14 up to (but not including) the patched stable releases. Fixed versions include Linux 5.15.87, 6.0.18, 6.1.4, and 6.2. The EPSS score is approximately 0.018% (very low), and no CVSS base score has been formally assigned (Feedly, CIRCL).

The root cause is a NULL pointer dereference (CWE-476) in imgu_subdev_set_selection() within the Linux kernel's drivers/staging/media/ipu3/ipu3-v4l2.c. When a NULL subdev state is passed to this function, it calls v4l2_subdev_get_try_crop() and v4l2_subdev_get_try_compose() before determining which state ("try" or "active") to use, resulting in a dereference of a NULL pointer. A similar issue was previously fixed for imgu_subdev_get_selection() via commit 30d03a0de650, but the set path remained vulnerable. The fix introduces helper functions for "crop" and "compose" access and applies the same guard logic used in the get path to the set path (Feedly, Linux Kernel Stable).

Successful exploitation of this vulnerability can cause a kernel NULL pointer dereference, leading to a system crash (kernel panic) and denial of service on affected Linux systems. The impact is primarily an availability concern, as the crash would affect any process or service running on the host. Confidentiality and integrity impacts are not expected, as the dereference does not appear to expose memory contents or allow arbitrary code execution based on available information (Feedly).

The Linux kernel maintainers have released patches addressing this vulnerability in the following stable versions: 5.15.87, 6.0.18, 6.1.4, and 6.2. Users and administrators running affected kernel versions (5.14 through the unpatched stable branches) should update to one of these fixed releases. The relevant upstream commits are available at the Linux kernel stable repository (Linux Kernel Stable, Linux Kernel Stable, Linux Kernel Stable, Linux Kernel Stable). As a workaround, systems that do not use the ipu3-imgu (Intel IPU3 Image Processing Unit) driver can unload or blacklist the module to eliminate exposure.