Linux Kernel Cros USBPD Notify Driver Error Handling Vulnerability

CVE-2022-50468

What is CVE-2022-50468?

A vulnerability exists in the Cros USBPD Notify driver within the Linux kernel, where the initialization function cros_usbpd_notify_init() fails to adequately check for errors after attempting to register a platform driver. This oversight can lead to the driver being installed even if the registration was unsuccessful. As a result, the unregistration process may not be adequately handled, generating warnings about unexpected driver unregistration during operations such as module removal. The issue has been identified and fixed by incorporating a check to confirm successful registration before proceeding with installation.

References