PT-2025-26100 · Linux+1 · Linux Kernel+1

Published 2022-07-06 · Updated 2025-11-28 · CVE-2022-50174

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, which could cause a kernel hang when using the hinic device as a bond slave device and reading device stats of the master bond device. The issue occurs when the kernel calls hinic get stats64() to collect hinic device stats, which may schedule the current task out and trigger a kernel hung panic if the system is under high pressure. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Improper Locking

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-667

CWE-119

Related Identifiers

BDU:2026-03561

BDU:2026-05732

CVE-2022-50174

Affected Products

Astra Linux

Linux Kernel

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50174.json · Exploit
• https://git.kernel.org/stable/c/3ba59bbe4f306bb6ee15753db0a40564c0eb7909 · Patch
• https://bdu.fstec.ru/vul/2026-03561 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50174 · Vendor Advisory
• https://git.kernel.org/stable/c/693f31dc91568e61047fd2980a8235e856cd9ce8 · Patch
• https://git.kernel.org/stable/c/e74f3097a9c713ce855cda07713393bcc23a005d · Patch
• https://osv.dev/vulnerability/CVE-2022-50174 · Vendor Advisory
• https://git.kernel.org/stable/c/98f9fcdee35add80505b6c73f72de5f750d5c03c · Patch
• https://git.kernel.org/stable/c/fced5bce712122654ec8a20356342698cce104d2 · Patch
• https://cve.org/CVERecord?id=CVE-2023-53067 · Security Note
• https://bdu.fstec.ru/vul/2026-05732 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50174 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50174 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50174 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50174 · Vendor Advisory