PT-2025-26003 · Linux+2 · Linux Kernel+2

Published 2022-04-28 · Updated 2025-07-28 · CVE-2022-50077

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak was found in the aa pivotroot() function. The issue occurs when aa replace current label() returns successfully, and the function fails to decrement the reference count of target, which was increased earlier by build pivotroot(). This causes a reference leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-03474

CVE-2022-50077

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 599

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50077.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50077 · Vendor Advisory
• https://git.kernel.org/stable/c/64103ea357734b82384c925cba4758fdb909be0c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50077 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50077 · Vendor Advisory
• https://git.kernel.org/stable/c/f4d5c7796571624e3f380b447ada52834270a287 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50077 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50077 · Vendor Advisory
• https://git.kernel.org/stable/c/2ceeb3296e9dde1d5772348046affcefdea605e2 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50077 · Security Note
• https://git.kernel.org/stable/c/3ca40ad7afae144169a43988ef1a3f16182faf0a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://git.kernel.org/stable/c/ef6fb6f0d0d8440595b45a7e53c6162c737177f4 · Patch