PT-2025-26056 · Linux+3 · Linux Kernel+3

Published 2022-07-27 · Updated 2025-06-18 · CVE-2022-50130

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the fbtft core, where the smem len is not set before the fb deferred io init call. This issue arises because fbtft framebuffer alloc() calls fb deferred io init() before initializing info->fix.smem len, which is set to zero by the framebuffer alloc() function. As a result, it triggers a WARN ON() at the start of fb deferred io init(), and the function does not perform any actions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Buffer Overflow

Weakness Enumeration

CWE-665

CWE-120

Related Identifiers

BDU:2026-03264

CESA-2023_2951

CVE-2022-50130

RHSA-2023:2951

RHSA-2023_2951

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50130.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-50130 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50130 · Vendor Advisory
• https://git.kernel.org/stable/c/81e878887ff82a7dd42f22951391069a5d520627 · Patch
• https://git.kernel.org/stable/c/4178bfa3fc9de556dfe248a6eabe29280f0ffda5 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50130 · Vendor Advisory
• https://git.kernel.org/stable/c/6ae6abe240306f878557d6eadd950a2e2561f59f · Patch
• https://git.kernel.org/stable/c/5185c319e8ea67657e0d3edd520a7276516c506a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50130 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50130 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50130 · Security Note
• https://ubuntu.com/security/CVE-2022-50130 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03264 · Security Note
• https://lore.kernel.org/linux-cve-announce/2025061814-CVE-2022-50130-b9e9@gregkh · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note