PT-2025-25969 · Linux+1 · Linux Kernel+1

Published 2022-08-13 · Updated 2025-06-18 · CVE-2022-50043

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential refcount leak has been identified in the ndisc router discovery() function. The issue occurs when specific conditions are met, including a nonzero lifetime and a need for metric change. In such cases, the function may delete a route and set rt to NULL, then attempt to grab rt and neigh again. If successful, it overwrites neigh without decreasing the reference count of the previous neigh, potentially leading to memory leaks. The issue is resolved by decrementing the reference count of neigh in place.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

CWE-664

Related Identifiers

BDU:2026-03481

CVE-2022-50043

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50043.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50043 · Vendor Advisory
• https://git.kernel.org/stable/c/ffb15594433391fd7885eb88ce5a7f7bdeefbb15 · Patch
• https://git.kernel.org/stable/c/7998043d31d000c3a93f46182e6569dd0eecda34 · Patch
• https://git.kernel.org/stable/c/7396ba87f1edf549284869451665c7c4e74ecd4f · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50043 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50043 · Security Note
• https://ubuntu.com/security/CVE-2022-50043 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50043 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03481 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50043 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50043 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2025061843-CVE-2022-50043-e7dc@gregkh · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.63 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note