PT-2025-26021 · Linux+3 · Linux Kernel+3

Published 2022-08-09 · Updated 2026-04-20 · CVE-2022-50095

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel. The problem occurs when a non-leader thread calls execve, causing it to switch PIDs with the leader process. As a result, posix cpu timer del cannot find the task because the timer still points to the old PID, leading to armed timers not being disarmed and removed from the timerqueue list. This results in a use-after-free when the list is later processed. The issue has been resolved by cleaning up the timers from the de-threaded task before freeing them.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-459

CWE-416

Related Identifiers

BDU:2026-02807

CVE-2022-50095

RHSA-2022:7318

RHSA-2022:8267

RHSA-2022_7318

RHSA-2022_8267

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 598

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50095.json · Exploit
• https://git.kernel.org/stable/c/9e255ed238fc67058df87b0388ad6d4b2ef3a2bd · Patch
• https://git.kernel.org/stable/c/b2fc1723eb65abb83e00d5f011de670296af0b28 · Patch
• https://git.kernel.org/stable/c/e8cb6e8fd9890780f1bfcf5592889e1b879e779c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50095 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50095 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02807 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50095 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50095 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50095 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50095 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50095 · Vendor Advisory
• https://git.kernel.org/stable/c/541840859ace9c2ccebc32fa9e376c7bd3def490 · Patch