Acknowledged
Created: Jun 18, 2025
Updated: Sep 4, 2026
Resolved Date: Jun 19, 2025
Found In Version: 10.25.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable()[EOL][EOL]If 'ep' is NULL, result of ep_to_cdns3_ep(ep) is invalid pointer[EOL]and its dereference with priv_ep->cdns3_dev may cause panic.[EOL][EOL]Found by Linux Verification Center (linuxtesting.org) with SVACE.
CREATE(Triage):(User=lchen-cn) [CVE-2022-50132 (https://nvd.nist.gov/vuln/detail/CVE-2022-50132)
