PT-2025-26054 · Linux · Linux Kernel

Published 2025-06-18 · Updated 2025-06-18 · CVE-2022-50128

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel, specifically the android binder component. It involves the unsafe practice of saving a pointer to a VMA outside of the mmap lock for later use. This can lead to failure paths after the recorded VMA pointer may be freed during setup, and there is no callback to clear the saved pointer. The VMA pointer may also become stale due to various VMA operations. To address this, the binder alloc struct has been modified to record the start address of the VMA, and vma lookup() is used to retrieve the VMA when needed. Additionally, lockdep mmap lock checks have been added to ensure the lock is held for synchronization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-50128

Affected Products

Linux Kernel

References · 10

• https://ubuntu.com/security/CVE-2022-50128 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50128 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50128 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50128 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50128 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50128 · Security Note
• https://git.kernel.org/stable/c/1ec3f76a436d750fd5023caec5da0494fc2870d2 · Note
• https://git.kernel.org/stable/c/a43cfc87caaf46710c8027a8c23b8a55f1078f19 · Note
• https://git.kernel.org/stable/c/925e6b6f82c9c80ab3c17acbde8d16f349da7d26 · Note
• https://git.kernel.org/stable/c/622ef885a89ad04cfb76ee478fb44f051125d1f1 · Note