PT-2025-26065 · Linux+3 · Linux Kernel+3

Published 2022-07-14 · Updated 2025-11-18 · CVE-2022-50139

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak bug was found in the ast vhub init desc() function. The issue arises because of node put() is not called for the reference returned by of get child by name(), which increases the refcount.

Recommendations For the affected Linux kernel versions, consider applying a patch that fixes the refcount leak bug in the ast vhub init desc() function. As a temporary workaround, ensure proper reference counting by manually calling of node put() for the reference returned by of get child by name() to prevent refcount leaks.

Exploit

Fix

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-04568

CVE-2022-50139

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 597

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50139.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50139 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50139 · Vendor Advisory
• https://git.kernel.org/stable/c/220fafb4ed04187e9c17be4152da5a7f2ffbdd8c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50139 · Security Note
• https://git.kernel.org/stable/c/4070f3c83cd28267f469a59751480ad39435f26a · Patch
• https://ubuntu.com/security/CVE-2022-50139 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04568 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://git.kernel.org/stable/c/0e0a40c803643f4edc30f0660f2f3bea4d57a99a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50139 · Vendor Advisory
• https://git.kernel.org/stable/c/3503305225ca24c3229414c769323fb8bf39b4bf · Patch
• https://git.kernel.org/stable/c/e6db5780c2bf6e23be7b315809ef349b4b4f2213 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02322-1 · Vendor Advisory