PT-2025-25988 · Linux+2 · Linux Kernel+2

Published 2022-08-09 · Updated 2025-07-28 · CVE-2022-50062

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description A bug in the Linux kernel has been resolved, specifically in the bgmac module. The issue is triggered by wrong bytes compl and can cause a BUG ON when there is an RX interrupt between setting ring->end and netdev sent queue(). This can lead to bgmac dma tx free() miscalculating the queue size while called from bgmac poll(). The issue seems to be present in both RT and mainline kernels.

Recommendations For Linux kernel versions prior to the fixed version, apply the patch that fixes the bug triggered by wrong bytes compl in the bgmac module. As a temporary workaround, consider disabling the bgmac module until a patch is available.

Exploit

Fix

Assertion Failure

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-617

CWE-121

CWE-119

Related Identifiers

BDU:2026-04875

CVE-2022-50062

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 594

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50062.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50062 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://git.kernel.org/stable/c/c506c9a97120f43257e9b3ce7b1f9a24eafc3787 · Patch
• https://git.kernel.org/stable/c/ab2b55bb25db289ba0b68e3d58494476bdb1041d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://git.kernel.org/stable/c/ac6d4482f29ab992b605c1b4bd1347f1f679f4e4 · Patch
• https://bdu.fstec.ru/vul/2026-04875 · Security Note
• https://git.kernel.org/stable/c/da1421a29d3b8681ba6a7f686bd0b40dda5acaf3 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50062 · Security Note
• https://git.kernel.org/stable/c/1b7680c6c1f6de9904f1d9b05c952f0c64a03350 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50062 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50062 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02322-1 · Vendor Advisory