{"id":"CVE-2022-50412","summary":"drm: bridge: adv7511: unregister cec i2c device after cec adapter","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: bridge: adv7511: unregister cec i2c device after cec adapter\n\ncec_unregister_adapter() assumes that the underlying adapter ops are\ncallable. For example, if the CEC adapter currently has a valid physical\naddress, then the unregistration procedure will invalidate the physical\naddress by setting it to f.f.f.f. Whence the following kernel oops\nobserved after removing the adv7511 module:\n\n    Unable to handle kernel execution of user memory at virtual address 0000000000000000\n    Internal error: Oops: 86000004 [#1] PREEMPT_RT SMP\n    Call trace:\n     0x0\n     adv7511_cec_adap_log_addr+0x1ac/0x1c8 [adv7511]\n     cec_adap_unconfigure+0x44/0x90 [cec]\n     __cec_s_phys_addr.part.0+0x68/0x230 [cec]\n     __cec_s_phys_addr+0x40/0x50 [cec]\n     cec_unregister_adapter+0xb4/0x118 [cec]\n     adv7511_remove+0x60/0x90 [adv7511]\n     i2c_device_remove+0x34/0xe0\n     device_release_driver_internal+0x114/0x1f0\n     driver_detach+0x54/0xe0\n     bus_remove_driver+0x60/0xd8\n     driver_unregister+0x34/0x60\n     i2c_del_driver+0x2c/0x68\n     adv7511_exit+0x1c/0x67c [adv7511]\n     __arm64_sys_delete_module+0x154/0x288\n     invoke_syscall+0x48/0x100\n     el0_svc_common.constprop.0+0x48/0xe8\n     do_el0_svc+0x28/0x88\n     el0_svc+0x1c/0x50\n     el0t_64_sync_handler+0xa8/0xb0\n     el0t_64_sync+0x15c/0x160\n    Code: bad PC value\n    ---[ end trace 0000000000000000 ]---\n\nProtect against this scenario by unregistering i2c_cec after\nunregistering the CEC adapter. Duly disable the CEC clock afterwards\ntoo.","modified":"2026-03-20T12:22:34.824009Z","published":"2025-09-18T16:03:56.159Z","related":["SUSE-SU-2025:03615-1","SUSE-SU-2025:03626-1","SUSE-SU-2025:3761-1","openSUSE-SU-2025:15585-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50412.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/3747465c5da7a11957a34bbb9485d9fc253b91cc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/40cdb02cb9f965732eb543d47f15bef8d10f0f5f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4d4d5bc659206b187263190ad9a03513f625659d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/86ae5170786aea3e1751123ca55700fb9b37b623"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f369fb4deed7ab997cfa703dc85ec08b3adc1af8"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50412.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50412"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3b1b975003e4a3da4b93ab032487a3ae4afca7b5"},{"fixed":"3747465c5da7a11957a34bbb9485d9fc253b91cc"},{"fixed":"f369fb4deed7ab997cfa703dc85ec08b3adc1af8"},{"fixed":"4d4d5bc659206b187263190ad9a03513f625659d"},{"fixed":"86ae5170786aea3e1751123ca55700fb9b37b623"},{"fixed":"40cdb02cb9f965732eb543d47f15bef8d10f0f5f"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50412.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}