PT-2025-25981 · Linux+4 · Linux Kernel+4

Published 2022-08-12 · Updated 2025-07-28 · CVE-2022-50055

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the iavf driver's adminq error handling. The issue involves the allocation of DMA coherent memory for VF mailbox using dma alloc coherent in iavf alloc asq bufs and iavf alloc arq bufs. Without the fix, DMA regions for ASQ and ARQ are not freed in case of an error during configuration, leading to pending DMA allocations when unloading the interface. This can result in leaked entries, with details including device address, size, and mapping information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Improper Resource Release

Weakness Enumeration

CWE-401

CWE-404

Related Identifiers

BDU:2026-02580

CESA-2022_7110

CESA-2022_7683

CVE-2022-50055

RHSA-2022:7110

RHSA-2022:7683

RHSA-2022_7110

RHSA-2022_7683

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02334-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 735

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50055.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50055 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50055 · Vendor Advisory
• https://git.kernel.org/stable/c/419831617ed349992c84344dbd9e627f9e68f842 · Patch
• https://bdu.fstec.ru/vul/2026-02580 · Security Note
• https://git.kernel.org/stable/c/35c63581fdefdcbaeae8cded18908523252353ad · Patch
• https://git.kernel.org/stable/c/4fe80492d53971d9a49f39f3c86d2d67c6f3638a · Patch
• https://git.kernel.org/stable/c/dab6b551f5ba4c79a0dd4970dd8533c37a7b100f · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50055 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50055 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50055 · Vendor Advisory
• https://git.kernel.org/stable/c/ff289f2be5899efd0e897d2b434a78e36df2c69b · Patch