Security readout for executives and security teams
Plain-English summary
CVE-2022-50777 is a Linux kernel issue in the xgmiitorgmii network PHY driver. The bug leaks a device reference during probe handling. Public data does not provide CVSS, CWE, exploitation evidence, or a clear business impact. Treat it as a kernel maintenance exposure, especially for systems using this driver.
Executive priority
Schedule through normal kernel patch management unless your environment uses affected network PHY hardware at scale. Escalate priority for embedded or network appliances where kernel updates are infrequent and driver exposure is likely.
Technical view
The fix adds release handling for a device reference returned by of_phy_find_device() in xgmiitorgmii_probe. Without put_device(), the driver can leak a reference. The CVE record lists multiple affected Linux kernel versions and stable kernel commits resolving the issue across branches.
Likely exposure
Exposure appears limited to Linux systems running affected kernel versions with the xgmiitorgmii PHY driver relevant to their hardware. General-purpose servers may be unaffected if this driver is absent or unused. Embedded, network, or SoC-based Linux deployments deserve closer review.
Exploitation context
The provided sources do not show active exploitation, public exploit availability, or CISA KEV listing. They also do not describe attacker prerequisites or impact. The issue is documented as a kernel refcount leak fixed in stable commits.
Researcher notes
Evidence is limited to the CVE record and Linux stable commits. No CVSS, CWE, exploit status, or detailed impact is provided. Analysis should focus on code presence, kernel branch mapping, and whether downstream vendors have backported the put_device() fix.
Mitigation direction
- Review vendor or distribution kernel advisories for CVE-2022-50777.
- Apply a kernel update containing the referenced stable fix.
- Prioritize systems using xgmiitorgmii PHY hardware or related device trees.
- Reboot systems after kernel updates where required.
- If patching is delayed, follow vendor guidance for compensating controls.
Validation and detection
- Inventory Linux kernel versions across affected environments.
- Identify systems using the xgmiitorgmii PHY driver.
- Confirm the installed kernel includes the referenced stable commit.
- Verify systems booted into the updated kernel after patching.
- Track distro advisory status if upstream fixes are not yet packaged.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-50777 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/53526dbc8aa6b95e9fc2ab1e29b1a9145721da24CVE reference
- https://git.kernel.org/stable/c/78b0b1ff525d9be4babf5a148a4de0d50042d95dCVE reference
- https://git.kernel.org/stable/c/00616bd1913a4f879679e02dc08c2f501ca2bd4cCVE reference
- https://git.kernel.org/stable/c/106d0d33c9d1ec4ddeeffc1fdc717ff09953d4edCVE reference
- https://git.kernel.org/stable/c/4d112f001612c79927c1ecf29522b34c4fa292e0CVE reference
- https://git.kernel.org/stable/c/52841e71253e6ace72751c72560950474a57d04cCVE reference
- https://git.kernel.org/stable/c/ee84d37a5f08ed1121cdd16f8f3ed87552087a21CVE reference
- https://git.kernel.org/stable/c/d039535850ee47079d59527e96be18d8e0daa84bCVE reference
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.