PT-2025-25960 · Linux+3 · Linux Kernel+3

Published 2022-06-10 · Updated 2025-11-13 · CVE-2022-50034

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel, specifically in the cdns3 gadget driver. The problem occurs when the cdns3 gadget ep free request() function frees the space pointed to by priv req, but priv req is still used in the subsequent list del init() call. This can lead to a use-after-free read in the list del entry valid() function. The issue is resolved by moving the list del init() call before the cdns3 gadget ep free request() call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Use After Free

Weakness Enumeration

CWE-119

CWE-416

Related Identifiers

BDU:2026-02576

CVE-2022-50034

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 597

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50034.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-50034 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50034 · Vendor Advisory
• https://git.kernel.org/stable/c/c3c1dbad3a2db32ecf371c97f2058491b8ba0f9a · Patch
• https://git.kernel.org/stable/c/6d7ac60098b206d0472475b666cb09d556bec03d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50034 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6fd50446e7c9a98b4bcf96815f5c9602a16ea472 · Patch
• https://ubuntu.com/security/CVE-2022-50034 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02576 · Security Note
• https://git.kernel.org/stable/c/e65d9b7147d7be3504893ca7dfb85286bda83d40 · Patch
• https://git.kernel.org/stable/c/7d602f30149a117eea260208b1661bc404c21dfd · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50034 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50034 · Vendor Advisory