PT-2025-26031 · Linux+1 · Linux Kernel+1

Published 2022-06-03 · Updated 2025-06-18 · CVE-2022-50105

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically in the powerpc/spufs component. The problem arises from the of find node by path() function returning a remote device node pointer with an incremented refcount, which requires the use of of node put() when done to avoid the leak. The issue is resolved by adding a missing of node put() call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-03456

CVE-2022-50105

Affected Products

Astra Linux

Linux Kernel

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50105.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50105 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50105 · Vendor Advisory
• https://git.kernel.org/stable/c/6ac059dacffa8ab2f7798f20e4bd3333890c541c · Patch
• https://git.kernel.org/stable/c/d0cb99948c5f6d8fe56f6e69b8dd0a05ee5f9cec · Patch
• https://git.kernel.org/stable/c/0aa5de2547b7ccf0a31bc740d12f829fae243112 · Patch
• https://bdu.fstec.ru/vul/2026-03456 · Security Note
• https://git.kernel.org/stable/c/14329d29a048dc35aac2374fb3d588d8190095a2 · Patch
• https://git.kernel.org/stable/c/69e9fa07b229badab808980e984a9fe824116f00 · Patch
• https://osv.dev/vulnerability/CVE-2022-50105 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50105 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50105 · Security Note
• https://git.kernel.org/stable/c/85aff6a9b7b7ec4e5c319f7946c9864c8d5e3d4a · Patch
• https://git.kernel.org/stable/c/43584490ee6c8a104797444af6bf89d0dafe95c0 · Patch
• https://ubuntu.com/security/CVE-2022-50105 · Vendor Advisory