PT-2025-26055 · Linux+4 · Linux Kernel+4

Published 2022-07-29 · Updated 2025-07-28 · CVE-2022-50129

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been resolved in the Linux kernel. The problem occurred in the RDMA/srpt module, where a patch was applied to change the LIO port members inside struct srpt port from regular members into pointers. This change decouples the lifetime of struct srpt port and struct srpt port id, fixing a KASAN complaint about a use-after-free in srpt enable tpg.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-04886

CESA-2023_2951

CVE-2022-50129

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 596

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50129.json · Exploit
• https://git.kernel.org/stable/c/e60d7e2462bf57273563c4e00dbfa79ee973b9e2 · Patch
• https://bdu.fstec.ru/vul/2026-04886 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50129 · Security Note
• https://git.kernel.org/stable/c/4ee8c39968a648d58b273582d4b021044a41ee5e · Patch
• https://cve.org/CVERecord?id=CVE-2022-50129 · Security Note
• https://git.kernel.org/stable/c/388326bb1c32fcd09371c1d494af71471ef3a04b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50129 · Vendor Advisory
• https://git.kernel.org/stable/c/b5605148e6ce36bb21020d49010b617693933128 · Patch
• https://osv.dev/vulnerability/CVE-2022-50129 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50129 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50129 · Vendor Advisory
• https://git.kernel.org/stable/c/de95b52d9aabc979166aba81ccbe623aaf9c16a1 · Patch