CVE-2022-50785: Linux

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: fsi: occ: Prevent use after free Use get_device and put_device in the open and close functions to make sure the device doesn't get freed while a file descriptor is open. Also, lock around the freeing of the device buffer and check the buffer before using it in the submit function.

Affected products

• Linux Linux: from 5.16, before 5.19.17 (fixed in 5.19.17); from 5.20, before 6.0.3 (fixed in 6.0.3)

Published 2025-12-30. Last modified 2026-08-04.