PT-2025-26045 · Linux+1 · Linux Kernel+1

Published 2022-06-24 · Updated 2025-06-18 · CVE-2022-50119

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A possible refcount leak in the rpmsg register device override() function has been resolved. The issue occurred when driver set override fails, and put device was not called to free vch. This has been fixed by adding a put device() call to the error path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-04583

CVE-2022-50119

Affected Products

Astra Linux

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50119.json · Exploit
• https://git.kernel.org/stable/c/3fdd5b2bb09fc2b5bf3504778f51c89bb48c097f · Patch
• https://git.kernel.org/stable/c/c449b28e437d18ae807479c4ac6b69d87b287c79 · Patch
• https://git.kernel.org/stable/c/c29335612ff44df979678a38e1f55c62004f421c · Patch
• https://ubuntu.com/security/CVE-2022-50119 · Vendor Advisory
• https://git.kernel.org/stable/c/01e6885b75e25a2dd0726455ef18ef9ce5e7dc87 · Patch
• https://git.kernel.org/stable/c/d7bd416d35121c95fe47330e09a5c04adbc5f928 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50119 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50119 · Security Note
• https://git.kernel.org/stable/c/d4c8bf5635c4bedaf2470761ced1f502b2d5434e · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50119 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50119 · Vendor Advisory
• https://git.kernel.org/stable/c/280ae5a028ef5d14ef9277746a3026a30aaebe4f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50119 · Security Note
• https://bdu.fstec.ru/vul/2026-04583 · Security Note