PT-2025-25970 · Linux+4 · Linux Kernel+4

Published 2022-08-15 · Updated 2025-07-15 · CVE-2022-50044

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the qrtr (Qualcomm Remote Transport) module. The issue arises when the MHI (Mobile Hardware Interface) channel generates events or interrupts immediately after being enabled, leading to two potential race conditions. The first race condition occurs when an event is dropped by the qcom mhi qrtr dl callback() function because dev set drvdata() has not been performed yet, preventing qrtr-ns from enumerating services in the device. The second race condition happens when an event occurs after dev set drvdata() but before qrtr endpoint register(), causing a kernel panic due to accessing a wrong pointer in qcom mhi qrtr dl callback(). This is because the endpoint has not been created yet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2026-02577

CESA-2023_2951

CVE-2022-50044

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

RHSA-2025:14744

RHSA-2025:14749

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 581

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50044.json · Exploit
• https://ubuntu.com/security/CVE-2022-50044 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50044 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50044 · Vendor Advisory
• https://git.kernel.org/stable/c/a1a75f78a2937567946b1b756f82462874b5ca20 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50044 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50044 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50044 · Vendor Advisory
• https://git.kernel.org/stable/c/68a838b84effb7b57ba7d50b1863fc6ae35a54ce · Patch
• https://osv.dev/vulnerability/CVE-2022-50044 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02577 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://git.kernel.org/stable/c/c682fb70a7dfc25b848a4ff3a385b0471b470606 · Patch
• https://bugzilla.suse.com/1243627 · Note