LiveActive security incident?Get immediate response
CVE Record

CVE-2022-50274: media: dvbdev: adopts refcnt to avoid UAF

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: adopts refcnt to avoid UAF dvb_unregister_device() is known that prone to use-after-free. That is, the cleanup from dvb_unregister_device() releases the dvb_device even if there are pointers stored in file->private_data still refer to it. This patch adds a reference counter into struct dvb_device and delays its deallocation until no pointer refers to the object.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

CVE-2022-50274 is a Linux kernel flaw in the DVB media device cleanup path. A device object could be freed while still referenced, creating a use-after-free condition. The sources do not provide CVSS, confirmed exploitation, or distribution-specific impact, so urgency depends on affected kernel deployment and DVB exposure.

Executive priority

Treat as a kernel maintenance item with unknown severity. Patch through normal kernel update channels, prioritizing shared systems and hosts with DVB media exposure. Do not escalate as an active exploitation emergency based on the provided evidence.

Technical view

The issue is in media/dvbdev: dvb_unregister_device() could release a dvb_device while file->private_data still pointed to it. The kernel fix adds reference counting to struct dvb_device and delays deallocation until outstanding references are gone.

Likely exposure

Exposure is limited to Linux systems running affected kernel versions or missing the referenced stable fixes. The source bundle identifies Linux only, with no affected distribution list. Risk is most relevant where the DVB media subsystem is present and accessible to local users or workloads.

Exploitation context

No active exploitation is cited, and the CVE is not marked KEV. The sources describe a kernel use-after-free but do not provide exploitability details, required privileges, impact outcome, or remote attack evidence.

Researcher notes

The record is sparse: no CVSS, CWE, privilege requirements, exploit status, or distro mapping. Analysis should focus on the dvb_unregister_device lifetime bug and whether downstream kernels contain the reference-counting fix or equivalent backport.

Mitigation direction

  • Check vendor or distribution kernel advisories for CVE-2022-50274 coverage.
  • Update affected Linux kernels to a release containing the listed stable fixes.
  • Prioritize shared or multi-user systems with DVB media functionality enabled.
  • Reboot systems after kernel updates to ensure the fixed kernel is active.
  • If updates are unavailable, follow vendor guidance for reducing DVB subsystem exposure.

Validation and detection

  • Inventory Linux kernel versions across managed hosts.
  • Confirm whether deployed kernels include one of the referenced stable commits or downstream backports.
  • Identify systems where DVB media support is enabled or accessible.
  • Verify patched systems are running the updated kernel after reboot.
  • Track vendor advisories because the source bundle lacks distribution-specific fixed versions.
Prepared
Confidence
medium
Sources
10

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2022-50274 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
0ADP providers
9Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2unaffected
LinuxLinux2.6.12, 0, 4.14.303, 4.19.270, 5.4.229, 5.10.163, 5.15.86, 6.0.16, 6.1.2, 6.2affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.