PT-2025-26006 · Linux+3 · Linux Kernel+3

Published 2024-04-30 · Updated 2025-11-18 · CVE-2022-50080

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0

Description The issue arises from an integer overflow in the register shm helper() function when calculating the number of pages covered by a user-supplied memory region. This causes a NULL pointer dereference in the internal get user pages fast() function, a helper function of pin user pages fast(). The error occurs when the tee shm register user buf() function fails to validate user space addresses, leading to a kernel NULL pointer dereference.

Recommendations For Linux kernel versions prior to 5.19.0, consider adding an explicit call to access ok() in tee shm register user buf() to catch invalid user space addresses early. As a temporary workaround, restrict the use of the register shm helper() function until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-50080

OESA-2025-1726

RHSA-2024:2394

RHSA-2024_2394

SUSE-SU-2025:03204-1

SUSE-SU-2025_03204-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 162

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50080.json · Exploit
• https://git.kernel.org/stable/c/2f8e79a1a6128214cb9b205a9869341af5dfb16b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49981 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53125 · Security Note
• https://ubuntu.com/security/CVE-2022-50080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49814 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53062 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49917 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53066 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53053 · Security Note
• https://git.kernel.org/stable/c/58c008d4d398f792ca67f35650610864725518fd · Patch
• https://osv.dev/vulnerability/OESA-2025-1726 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50080 · Vendor Advisory
• https://git.kernel.org/stable/c/b37e0f17653c00b586cdbcdf0dbca475358ecffd · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50203 · Security Note