PT-2025-25996 · Linux+5 · Linux Kernel+5

Published 2022-08-04 · Updated 2026-05-26 · CVE-2022-50070

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc6-g2eae0556bb9d

Description A vulnerability in the Linux kernel has been resolved, related to the MultiPath TCP (MPTCP) protocol. The issue occurs when an MPTCP-level (re)transmit races with mptcp close() and the packet scheduler checks the subflow state before acquiring the socket lock, allowing data to be queued on closed subflows. The root cause is a race condition between the MPTCP (re)transmit and the mptcp close() function.

Recommendations For Linux kernel versions prior to 5.19.0-rc6-g2eae0556bb9d, update to a newer version that includes the fix for this issue. As a temporary workaround, consider disabling the MPTCP protocol until a patch is available. Restrict access to the vulnerable MPTCP module to minimize the risk of exploitation. Avoid using the MPTCP protocol in the affected Linux kernel versions until the issue is resolved.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

AZL-70349

BDU:2026-03375

CESA-2023_2951

CVE-2022-50070

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

RHSA-2025:19222

USN-7909-1

USN-7909-2

USN-7909-3

USN-7909-4

USN-7909-5

USN-7910-1

USN-7910-2

USN-7933-1

USN-7938-1

Affected Products

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Ubuntu

References · 234

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50070.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50070 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38335 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38576 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38708 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39734 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38685 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38700 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38581 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39795 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50070 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39684 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47691 · Vendor Advisory