PT-2025-26001 · Linux+1 · Linux Kernel+1

Published 2022-08-20 · Updated 2025-11-17 · CVE-2022-50075

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel's tracing/eprobes, where using a symbol "@" with an event probe can cause a NULL pointer dereference crash. To resolve this, event probes are made consistent with kprobes and uprobes, allowing them to reference data beyond the main registers, such as immediate addresses, symbols, and the current task name. Specifically, for the "comm" field, if it is used and the event being attached to does not have this field, it defaults to "$comm" as in kprobes, consistent with histograms and filters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-03398

CVE-2022-50075

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50075.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-50075 · Security Note
• https://git.kernel.org/stable/c/47cc883f21fa3bcf24891b4b455f4cd461ce2d6e · Patch
• https://git.kernel.org/stable/c/b489aca082a23033a3d8355cfb0032f0e2523440 · Patch
• https://osv.dev/vulnerability/CVE-2022-50075 · Vendor Advisory
• https://git.kernel.org/stable/c/6a832ec3d680b3a4f4fad5752672827d71bae501 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50075 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50075 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50075 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03398 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50075 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50075 · Security Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.63 · Note
• https://t.me/cveNotify/143091 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note