PT-2025-26004 · Linux+1 · Linux Kernel+1

Published 2022-08-20 · Updated 2025-06-18 · CVE-2022-50078

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc5-test+ #309

Description A vulnerability in the Linux kernel has been resolved, related to event probes (eprobes) in the tracing subsystem. The issue occurs when attempting to retrieve the instruction pointer (%rip) using event probes, which do not use pt regs, resulting in a kernel NULL pointer dereference. This can lead to a crash or potentially allow an attacker to exploit the vulnerability. The estimated number of potentially affected devices is not provided.

Recommendations For Linux kernel versions prior to 5.19.0-rc5-test+ #309, update to a newer version that includes the fix for this issue. As a temporary workaround, consider disabling the use of event probes until a patch is available. Restrict access to the tracing subsystem to minimize the risk of exploitation. Avoid using the $stack variable and the % register parsing in event probes until the issue is resolved.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-03473

CVE-2022-50078

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50078.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-50078 · Security Note
• https://ubuntu.com/security/CVE-2022-50078 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50078 · Vendor Advisory
• https://git.kernel.org/stable/c/7c262114a576d94c0ced80e232bbb17391a55908 · Patch
• https://git.kernel.org/stable/c/2673c60ee67e71f2ebe34386e62d348f71edee47 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50078 · Vendor Advisory
• https://git.kernel.org/stable/c/ba53c21ce9773743b8e0a8ada048c96ff2d55c67 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50078 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03473 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50078 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50078 · Vendor Advisory
• https://twitter.com/CVEnew/status/1935356202357010600 · Twitter Post
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.63 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note