CVE-2022-50411 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix error code path in acpi_ds_call_control_method() A use-after-free in acpi_ps_parse_aml() after a failing invocaion of acpi_ds_call_control_method() is reported by KASAN [1] and code inspection reveals that next_walk_state pushed to the thread by acpi_ds_create_walk_state() is freed on errors, but it is not popped from the thread beforehand. Thus acpi_ds_get_current_walk_state() called by acpi_ps_parse_aml() subsequently returns it as the new walk state which is incorrect. To address this, make acpi_ds_call_control_method() call acpi_ds_pop_walk_state() to pop next_walk_state from the thread before returning an error.
A use-after-free vulnerability has been identified in the Linux kernel's ACPICA component, specifically within the ACPI method handling. This issue arises in the function 'acpi_ps_parse_aml()' following a failed invocation of 'acpi_ds_call_control_method()'. The problem, reported by KASAN, stems from the 'next_walk_state' being pushed to the thread by 'acpi_ds_create_walk_state()' but not popped before an error occurs, leading to an incorrect walk state being returned. The vulnerability affects several versions of the Linux kernel.
Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been addressed. Instructions for upgrading the Linux kernel can be found in the official Linux documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0462fec709d51762ba486245bc344f44cc6cfa97 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2deb42c4f9776e59bee247c14af9c5e8c05ca9a6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/38e251d356a01b61a86cb35213cafd7e8fe7090c | kernel.org | Patch |
| https://git.kernel.org/stable/c/404ec60438add1afadaffaed34bb5fe4ddcadd40 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5777432ebaaf797e24f059979b42df3139967163 | kernel.org | Patch |
| https://git.kernel.org/stable/c/799881db3e03b5e98fe6a900d9d7de8c7d61e7ee | kernel.org | Patch |
| https://git.kernel.org/stable/c/9ef353c92f9d04c88de3af1a46859c1fb76db0f8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b0b83d3f3ffa96e8395c56b83d6197e184902a34 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f520d181477ec29a496c0b3bbfbdb7e2606c2713 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
| CWE-416 | Use After Free | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | < 4.9.337 >= 4.10, < 4.14.303 >= 4.15, < 4.19.270 >= 4.20, < 5.4.229 >= 5.5, < 5.10.163 >= 5.11, < 5.15.86 >= 5.16, < 6.0.16 >= 6.1, < 6.1.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 14, 2026 | CVE Modified | CISA-ADP |
| Dec 12, 2025 | Initial Analysis | [email protected] |
| Sep 18, 2025 | New CVE Received | kernel.org |