PT-2025-25926 · Linux+4 · Linux Kernel+4

Published 2022-08-24 · Updated 2026-03-14 · CVE-2022-50000

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0

Description A vulnerability in the Linux kernel has been resolved, related to the netfilter flowtable. The issue occurs when a flow table entry has pending HW stats or HW add work, causing the flow table cleanup to become stuck. This can lead to a use-after-free error. The vulnerability is fixed by flushing the pending work, setting the teardown flag to all flows in the flowtable, and forcing a garbage collector run to queue work to remove the flows from hardware.

Recommendations For Linux kernel versions prior to 5.12.0, apply the patch that fixes the netfilter flowtable issue by flushing the pending work and forcing a garbage collector run to remove the flows from hardware.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-02572

CESA-2023_0101

CESA-2023_2951

CVE-2022-50000

RHSA-2022:8267

RHSA-2022_8267

RHSA-2023:0101

RHSA-2023:0512

RHSA-2023:2951

RHSA-2023_0101

RHSA-2023_2951

RHSA-2025:15660

Affected Products

Astra Linux

Centos

Debian

Linux Kernel

Red Hat

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50000.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50000 · Vendor Advisory
• https://git.kernel.org/stable/c/9afb4b27349a499483ae0134282cefd0c90f480f · Patch
• https://git.kernel.org/stable/c/89e135a36a9eb81412b5459df94a80995ce62eef · Patch
• https://cve.org/CVERecord?id=CVE-2022-50000 · Security Note
• https://bdu.fstec.ru/vul/2026-02572 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50000 · Security Note
• https://git.kernel.org/stable/c/8fbdec08dbf7d7ab8e35bdc65eb4394bc82d1e26 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50000 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50000 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50000 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50000 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2022-50000 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6 · Note