PT-2025-26043 · Linux+3 · Linux Kernel+3

Published 2022-06-28 · Updated 2025-07-15 · CVE-2022-50117

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the vfio core and driver migration operations. Specifically, the mlx5 driver sets migration operations without considering its migration capabilities, which could lead to unexpected usage or errors if user space calls these operations even when the driver does not support migration. The solution involves splitting migration operations from main device operations, allowing drivers to set them separately when applicable. Additionally, the HISI driver was modified to match this new scheme.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2026-02815

CVE-2022-50117

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 580

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50117.json · Exploit
• https://ubuntu.com/security/CVE-2022-50117 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50117 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50117 · Vendor Advisory
• https://git.kernel.org/stable/c/bba6b12d73d36e0ddbc2c3ac5668a667b00d4345 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50117 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50117 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50117 · Security Note
• https://git.kernel.org/stable/c/6e97eba8ad8748fabb795cffc5d9e1a7dcfd7367 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50117 · Security Note
• https://bdu.fstec.ru/vul/2026-02815 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2022-50111 · Note
• https://bugzilla.suse.com/1244968 · Note