PT-2025-25972 · Linux+4 · Linux Kernel+4

Published 2022-08-10 · Updated 2025-07-28 · CVE-2022-50046

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to potential memory leaks in the rpc sysfs xprt state change() function. This occurs due to improper error handling when the function fails to grab the object xprt, resulting in a failure to decrease the reference count of another object xps. Additionally, the function does not check if xps is valid before using it, which may lead to NULL-dereferencing issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-664

CWE-401

CWE-911

Related Identifiers

BDU:2026-03478

CESA-2023_7077

CVE-2022-50046

RHSA-2023:2458

RHSA-2023:7077

RHSA-2023_2458

RHSA-2023_7077

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 593

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50046.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50046 · Vendor Advisory
• https://git.kernel.org/stable/c/bfc48f1b0505ffcb03a6d749139b7577d6b81ae0 · Patch
• https://git.kernel.org/stable/c/76fbeb1662b1c56514325118a07fba74dc4c79fe · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50046 · Vendor Advisory
• https://git.kernel.org/stable/c/c0434f0e058648649250b8ed6078b66d773de723 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50046 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50046 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50046 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03478 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50046 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50046 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02322-1 · Vendor Advisory