PT-2025-52932 · Linux · Linux Kernel

Publicado 2025-12-24 · Atualizado 2026-02-24 · CVE-2022-50702

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a potential memory leak within the vdpa sim module, specifically in the vdpasim net init() and vdpasim blk init() functions. The issue arises when a device registration fails during module probing, but the reference count of the kobject is not decremented to zero, leading to a leak of allocated memory for the device name. The fix involves calling put device() to ensure proper freeing of the allocated name in the kobject cleanup callback.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2022-50702

RHSA-2023:2458

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Produtos afetados

Linux Kernel

Referências · 972

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50702.json · Exploit
• https://suse.com/security/cve/CVE-2023-53862 · Nota
• https://bugzilla.suse.com/1255970 · Nota
• https://suse.com/security/cve/CVE-2023-54025 · Nota
• https://suse.com/security/cve/CVE-2023-54040 · Nota
• https://bugzilla.suse.com/1254623 · Nota
• https://bugzilla.suse.com/1256211 · Nota
• https://suse.com/security/cve/CVE-2025-68183 · Nota
• https://bugzilla.suse.com/1256214 · Nota
• https://suse.com/security/cve/CVE-2022-50848 · Nota
• https://bugzilla.suse.com/1254842 · Nota
• https://bugzilla.suse.com/1210644 · Nota
• https://suse.com/security/cve/CVE-2022-50736 · Nota
• https://bugzilla.suse.com/1255925 · Nota
• https://suse.com/security/cve/CVE-2022-50709 · Nota