PT-2025-25962 · Linux+2 · Linux Kernel+2

Published 2022-08-15 · Updated 2025-07-28 · CVE-2022-50036

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the drm/sun4i: dsi component. The issue occurs when computing packet sizes, where the packet overhead is subtracted using unsigned arithmetic, potentially leading to an underflow and wrapping around to near the maximal u16 value. This is fixed by using signed subtraction. The same fix is applied to other timings to prevent potential underflows.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Underflow

Buffer Overflow

Weakness Enumeration

CWE-191

CWE-119

Related Identifiers

BDU:2026-02662

CVE-2022-50036

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 600

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50036.json · Exploit
• https://ubuntu.com/security/CVE-2022-50036 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50036 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02308-1 · Vendor Advisory
• https://git.kernel.org/stable/c/82a1356a933d8443139f8886f11b63c974a09a67 · Patch
• https://git.kernel.org/stable/c/fb837f5b83461624e525727a8f4add14b201147e · Patch
• https://bdu.fstec.ru/vul/2026-02662 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50036 · Vendor Advisory
• https://git.kernel.org/stable/c/98e28de472ef248352f04f87e29e634ebb0ec240 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50036 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a1e7908f78f5a7f53f8cd83c7dcdfec974c95f26 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02322-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50036 · Vendor Advisory