PT-2025-26113 · Linux+4 · Linux Kernel+4

Published 2022-11-08 · Updated 2025-11-19 · CVE-2022-50187

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically an issue with the ath11k driver where a racing open() could trigger a BUG ON() in mod timer() when ath11k mac op start() is called before the mon reap timer has been set up. This issue was encountered with certain kernel versions, but not others, suggesting a possible timing change between versions. The vulnerability can cause a kernel BUG and produce a backtrace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CESA-2022_7683

CVE-2022-50187

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 591

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50187.json · Exploit
• https://git.kernel.org/stable/c/eaff3946a86fc63280a30158a4ae1e141449817c · Patch
• https://ubuntu.com/security/CVE-2022-50187 · Vendor Advisory
• https://git.kernel.org/stable/c/abb7dc8fbb27c15dcc927df56190f3c5ede58bd5 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a2c45f8c3d18269e641f0c7da2dde47ef8414034 · Patch
• https://git.kernel.org/stable/c/307ce58270b3b50ca21cfcc910568429b06803f7 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50187 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50187 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50187 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50187 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50187 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50187 · Vendor Advisory
• https://git.kernel.org/stable/c/d4ba1ff87b17e81686ada8f429300876f55f95ad · Patch