PT-2025-43092 · Linux+2 · Linux Kernel+2

Publicado 2022-09-09 · Atualizado 2025-12-04 · CVE-2022-50582

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel’s regulator core that can lead to an integer underflow. This occurs when a non-integer ratio is used between delay and poll enabled time, causing time remaining to underflow and preventing the loop from exiting as expected. The delay value can originate from Device Tree (DT) data, while poll enabled time is defined within the driver, making this scenario possible.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Underflow

Enumeração de Fraquezas

CWE-189

CWE-191

Identificadores relacionados

ALSA-2025_16880

BDU:2026-01483

CVE-2022-50582

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2025:4111-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

Produtos afetados

Linux Kernel

Red Hat

Suse

Referências · 453

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50582.json · Exploit
• https://bugzilla.suse.com/1250946 · Nota
• https://suse.com/security/cve/CVE-2022-50492 · Nota
• https://suse.com/security/cve/CVE-2022-50568 · Nota
• https://bugzilla.suse.com/1252486 · Nota
• https://bugzilla.suse.com/1251330 · Nota
• https://bugzilla.suse.com/1252688 · Nota
• https://bugzilla.suse.com/1251736 · Nota
• https://suse.com/security/cve/CVE-2022-50532 · Nota
• https://suse.com/security/cve/CVE-2022-50537 · Nota
• https://bugzilla.suse.com/1251082 · Nota
• https://bugzilla.suse.com/1250816 · Nota
• https://bugzilla.suse.com/1251295 · Nota
• https://bugzilla.suse.com/1249859 · Nota
• https://suse.com/security/cve/CVE-2023-53639 · Nota