CVE-2022-50468

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3

Description The Linux kernel contains a flaw in the cros usbpd notify module where the cros usbpd notify init() function does not validate the return value of platform driver register(). This can lead to successful module installation even if registration fails, potentially causing issues during module removal as indicated by an "Unexpected driver unregister!" warning. The issue occurs during the unregistration of the cros usbpd notify driver. The platform driver register() function is responsible for registering a platform driver with the kernel. Failure to check its return value can result in inconsistent driver state.

Recommendations Update to Linux kernel version 6.1.0-rc3 or later to address this issue.