PT-2025-26124 · Linux+2 · Linux Kernel+2

Published 2025-06-18 · Updated 2025-07-28 · CVE-2022-50198

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically affecting the ARM: OMAP2+ component. The of find matching node() function returns a node pointer with an incremented refcount, which should be decremented using of node put() when no longer needed to prevent a refcount leak. This issue has been resolved by adding the missing of node put() call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50198

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 591

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50198.json · Exploit
• https://git.kernel.org/stable/c/d294d60dc68550fee0fbbe8a638d798dcd40b2c5 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50198 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50198 · Vendor Advisory
• https://git.kernel.org/stable/c/e5ab8a4967d68a8e9f8f4559d144207d085a8c02 · Patch
• https://git.kernel.org/stable/c/942228fbf5d4901112178b93d41225be7c0dd9de · Patch
• https://git.kernel.org/stable/c/c652e0f51665f3fa575449909bbd9d7b45dfab1c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50198 · Security Note
• https://git.kernel.org/stable/c/1bf747824a8ca4008879fd7d2ce6b03d7b428858 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://git.kernel.org/stable/c/c4f92af7fc8cecb8eb426ad187e39c7bcc6679c7 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50198 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50198 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50198 · Vendor Advisory