CVE-2022-50850 - Vulnerability Details

- scsi: ipr: Fix WARNING in ipr_init()

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ipr: Fix WARNING in ipr_init()

ipr_init() will not call unregister_reboot_notifier() when
pci_register_driver() fails, which causes a WARNING. Call
unregister_reboot_notifier() when pci_register_driver() fails.

notifier callback ipr_halt [ipr] already registered
WARNING: CPU: 3 PID: 299 at kernel/notifier.c:29
notifier_chain_register+0x16d/0x230
Modules linked in: ipr(+) xhci_pci_renesas xhci_hcd ehci_hcd usbcore
led_class gpu_sched drm_buddy video wmi drm_ttm_helper ttm
drm_display_helper drm_kms_helper drm drm_panel_orientation_quirks
agpgart cfbft
CPU: 3 PID: 299 Comm: modprobe Tainted: G W
6.1.0-rc1-00190-g39508d23b672-dirty #332
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
rel-1.15.0-0-g2dd4b9b3f840-prebuilt.qemu.org 04/01/2014
RIP: 0010:notifier_chain_register+0x16d/0x230
Call Trace:
<TASK>
__blocking_notifier_chain_register+0x73/0xb0
ipr_init+0x30/0x1000 [ipr]
do_one_initcall+0xdb/0x480
do_init_module+0x1cf/0x680
load_module+0x6a50/0x70a0
__do_sys_finit_module+0x12f/0x1c0
do_syscall_64+0x3f/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd

Published: 2025-12-30

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`f72919ec2bbbe1c42cdda7857a96c0c40e1d78aa`	affected	< 020b66023712b1cc42c6ab8b76e4ec13efe4a092
`f72919ec2bbbe1c42cdda7857a96c0c40e1d78aa`	affected	< e965c4a60c1daa6e24355e35d78ca8e9f195196f
`f72919ec2bbbe1c42cdda7857a96c0c40e1d78aa`	affected	< 5debd337f534b122f7c5eac6557a41b5636c9b51
`f72919ec2bbbe1c42cdda7857a96c0c40e1d78aa`	affected	< eccbec017c95b9b9ecd4c05c6f5234d1487c72cc
`f72919ec2bbbe1c42cdda7857a96c0c40e1d78aa`	affected	< f4ba143b04a17559f2c85e18b47db117f40d8cf3
`f72919ec2bbbe1c42cdda7857a96c0c40e1d78aa`	affected	< e59da172059f05c594fda03a9e8a3a0e1f5116c0
`f72919ec2bbbe1c42cdda7857a96c0c40e1d78aa`	affected	< 8c739021b2022fbc40f71d3fa2e9162beef0c84a
`f72919ec2bbbe1c42cdda7857a96c0c40e1d78aa`	affected	< 4399a8632e5f8f1f695d91d992c7d418fb451f07
`f72919ec2bbbe1c42cdda7857a96c0c40e1d78aa`	affected	< e6f108bffc3708ddcff72324f7d40dfcd0204894

Linux

affected

Version	Status	Constraints
`2.6.34`	affected	—
`0`	unaffected	< 2.6.34
`4.9.337`	unaffected	≤ 4.9.*
`4.14.303`	unaffected	≤ 4.14.*
`4.19.270`	unaffected	≤ 4.19.*
`5.4.229`	unaffected	≤ 5.4.*
`5.10.163`	unaffected	≤ 5.10.*
`5.15.86`	unaffected	≤ 5.15.*
`6.0.16`	unaffected	≤ 6.0.*
`6.1.2`	unaffected	≤ 6.1.*
`6.2`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00064.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/020b66023712b1cc42c6ab8b76e4ec13efe4a092
https://git.kernel.org/stable/c/4399a8632e5f8f1f695d91d992c7d418fb451f07
https://git.kernel.org/stable/c/5debd337f534b122f7c5eac6557a41b5636c9b51
https://git.kernel.org/stable/c/8c739021b2022fbc40f71d3fa2e9162beef0c84a
https://git.kernel.org/stable/c/e59da172059f05c594fda03a9e8a3a0e1f5116c0
https://git.kernel.org/stable/c/e6f108bffc3708ddcff72324f7d40dfcd0204894
https://git.kernel.org/stable/c/e965c4a60c1daa6e24355e35d78ca8e9f195196f
https://git.kernel.org/stable/c/eccbec017c95b9b9ecd4c05c6f5234d1487c72cc
https://git.kernel.org/stable/c/f4ba143b04a17559f2c85e18b47db117f40d8cf3
https://lore.kernel.org/linux-cve-announce/2025123044-CVE-2022-50850-d6c0@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-50850
https://www.cve.org/CVERecord?id=CVE-2022-50850

History

Wed, 31 Dec 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123044-CVE-2022-50850-d6c0@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2022-50850 https://www.cve.org/CVERecord?id=CVE-2022-50850
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Tue, 30 Dec 2025 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: scsi: ipr: Fix WARNING in ipr_init() ipr_init() will not call unregister_reboot_notifier() when pci_register_driver() fails, which causes a WARNING. Call unregister_reboot_notifier() when pci_register_driver() fails. notifier callback ipr_halt [ipr] already registered WARNING: CPU: 3 PID: 299 at kernel/notifier.c:29 notifier_chain_register+0x16d/0x230 Modules linked in: ipr(+) xhci_pci_renesas xhci_hcd ehci_hcd usbcore led_class gpu_sched drm_buddy video wmi drm_ttm_helper ttm drm_display_helper drm_kms_helper drm drm_panel_orientation_quirks agpgart cfbft CPU: 3 PID: 299 Comm: modprobe Tainted: G W 6.1.0-rc1-00190-g39508d23b672-dirty #332 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.15.0-0-g2dd4b9b3f840-prebuilt.qemu.org 04/01/2014 RIP: 0010:notifier_chain_register+0x16d/0x230 Call Trace: <TASK> __blocking_notifier_chain_register+0x73/0xb0 ipr_init+0x30/0x1000 [ipr] do_one_initcall+0xdb/0x480 do_init_module+0x1cf/0x680 load_module+0x6a50/0x70a0 __do_sys_finit_module+0x12f/0x1c0 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd
Title		scsi: ipr: Fix WARNING in ipr_init()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/020b66023712b1cc42c6ab8b76e4ec13efe4a092 https://git.kernel.org/stable/c/4399a8632e5f8f1f695d91d992c7d418fb451f07 https://git.kernel.org/stable/c/5debd337f534b122f7c5eac6557a41b5636c9b51 https://git.kernel.org/stable/c/8c739021b2022fbc40f71d3fa2e9162beef0c84a https://git.kernel.org/stable/c/e59da172059f05c594fda03a9e8a3a0e1f5116c0 https://git.kernel.org/stable/c/e6f108bffc3708ddcff72324f7d40dfcd0204894 https://git.kernel.org/stable/c/e965c4a60c1daa6e24355e35d78ca8e9f195196f https://git.kernel.org/stable/c/eccbec017c95b9b9ecd4c05c6f5234d1487c72cc https://git.kernel.org/stable/c/f4ba143b04a17559f2c85e18b47db117f40d8cf3

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:15:27.089Z

Updated: 2026-05-11T19:26:19.596Z

Reserved: 2025-12-30T12:06:07.134Z

Link: CVE-2022-50850

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-30T13:15:59.687

Modified: 2026-04-15T00:35:42.020

Link: CVE-2022-50850

Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2022-50850 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object