What is CVE-2022-50236?

CVE-2022-50236 is a medium-severity vulnerability in Linux, classified under Use of Uninitialized Resource. CVSS score: 5.5/10. Published 2025-09-15.

How severe is CVE-2022-50236?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Linux

CVE-2022-50236

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix crash on isr after kexec() If the system is rebooted via isr(), the IRQ handler might be triggered before the domain is initialized. Resulting on an invalid memory access error. Fix: [ 0.500930] Unable to handle kernel read from unreadable memory at virtual address 0000000000000070 [ 0.501166] Call trace: [ 0.501174] report_iommu_fault+0x28/0xfc [ 0.501180] mtk_iommu_isr+0x10c/0x1c0 [ joro: Fixed spelling in commit message ]

EPSS: 0.001 (4.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux — versions 0df4fabe208d9576f2671d31e77cf46d20fdcd01, 4.6, 0
Linux Linux_kernel

Weakness classification (CWE)

CWE-908 — Use of Uninitialized Resource

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2022-50236?: CVE-2022-50236 is a medium-severity vulnerability in Linux, classified under Use of Uninitialized Resource. CVSS score: 5.5/10. Published 2025-09-15.
How severe is CVE-2022-50236?: Medium severity. CVSS v3 base score is 5.5 out of 10.