PT-2025-25927 · Linux+3 · Linux Kernel+3

Published 2022-08-23 · Updated 2025-11-14 · CVE-2022-50001

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel's netfilter, specifically the nft tproxy component. TPROXY is only allowed from the prerouting hook, but nft tproxy does not enforce this restriction. This oversight can lead to a crash, characterized by a null dereference, when tproxy is used from other hooks, such as the output hook.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-02573

CESA-2023_2951

CVE-2022-50001

RHSA-2022:8267

RHSA-2022_8267

RHSA-2023:2951

RHSA-2023_2951

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50001.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50001 · Vendor Advisory
• https://git.kernel.org/stable/c/343fed6b0daeb528ae5c9d4d84d9ff763ac95619 · Patch
• https://git.kernel.org/stable/c/18bbc3213383a82b05383827f4b1b882e3f0a5a5 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50001 · Vendor Advisory
• https://git.kernel.org/stable/c/0b21edf4cc13516716848e0a4fdf726aa2a62cd9 · Patch
• https://git.kernel.org/stable/c/eaba3f9b672c3a3f820da8ee9584b9520674eafa · Patch
• https://bdu.fstec.ru/vul/2026-02573 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50001 · Security Note
• https://ubuntu.com/security/CVE-2022-50001 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50001 · Vendor Advisory
• https://git.kernel.org/stable/c/83ef55c4281f1b4c6bd4457c2e96ccd1c9e80200 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50001 · Security Note
• https://git.kernel.org/stable/c/9a1d92cbeac3335fee99fa865b8c5b0f2e71a8f7 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50001 · Vendor Advisory