PT-2025-26007 · Linux+2 · Linux Kernel+2

Published 2022-11-08 · Updated 2025-06-18 · CVE-2022-50081

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from the Linux kernel's KVM module not properly handling the unloading of modules, specifically when using try get module(). This can lead to fatal errors, such as use-after-free explosions, when a module is forcefully unloaded while a VM is running. The error handling does not properly unwind all actions taken, failing to call kvm arch pre destroy vm() and remove the VM from the global list. The use of try get module() is based on a removed feature, "rmmod --wait", which was deleted nearly a decade ago. Forced unloading of modules can cause issues, but addressing this is out-of-scope.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CESA-2022_7683

CVE-2022-50081

RHSA-2022:7683

RHSA-2022_7683

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Centos

Linux Kernel

Red Hat

References · 10

• https://cve.org/CVERecord?id=CVE-2022-50081 · Security Note
• https://ubuntu.com/security/CVE-2022-50081 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50081 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50081 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50081 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50081 · Vendor Advisory
• https://git.kernel.org/stable/c/405294f29faee5de8c10cb9d4a90e229c2835279 · Note
• https://lore.kernel.org/linux-cve-announce/2025061857-CVE-2022-50081-80dc@gregkh/T · Note
• https://git.kernel.org/stable/c/865e08b77c244eed0b80439320e7e8440f61ebce · Note
• https://git.kernel.org/stable/c/177bf354200962c6f0de6dd37c86a9bf3b54003a · Note