PT-2025-26035 · Linux+2 · Linux Kernel+2

Published 2022-07-19 · Updated 2025-07-28 · CVE-2022-50109

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak bug has been identified in the Linux kernel, specifically in the amba-clcd driver. The issue arises from the failure to call of node put() for references returned by of graph get next endpoint() and of graph get remote port parent(), which increases the refcount. This bug is resolved by ensuring of node put() is called in both the fail path and when the references are no longer needed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

CWE-664

Related Identifiers

BDU:2026-03470

CVE-2022-50109

OESA-2025-1666

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02334-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 748

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50109.json · Exploit
• https://git.kernel.org/stable/c/2688df86c02da6bdc9866b62d974e169a2678883 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50109 · Security Note
• https://git.kernel.org/stable/c/a88ab277cca99aeb9a3b2b7db358f1a6dd528b0c · Patch
• https://git.kernel.org/stable/c/da276dc288bf838ea0fd778b5441ec0f601c69f7 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02308-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50109 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50109 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://git.kernel.org/stable/c/26c2b7d9fac42eb8317f3ceefa4c1a9a9170ca69 · Patch
• https://git.kernel.org/stable/c/a97ff8a949dbf41be89f436b2b1a2b3d794493df · Patch
• https://git.kernel.org/stable/c/a51519ebd0fdad3546463018b8f6bc3b0f4d3032 · Patch
• https://bdu.fstec.ru/vul/2026-03470 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1666 · Vendor Advisory