PT-2025-26145 · Linux+3 · Linux Kernel+3

Published 2020-11-04 · Updated 2025-06-18 · CVE-2022-50219

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use After Free bug was found in the compute effective progs() function. The issue occurs when a fault is injected into an allocation failure while calling bpf link detach() on a number of BPF links. This triggers the link to be freed, but the memory allocation failure causes the pointer to the bpf cgroup link to be restored and then freed, resulting in a dereferenced already deallocated pointer in prog list length(). This bug was discovered by Syzbot.

Recommendations To fix this issue, do not preserve the pointer to the prog or link in the list, but remove it and replace it with a dummy prog without shrinking the table. The subsequent call to cgroup bpf detach() or cgroup bpf detach() will correct it.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CESA-2020_4431

CVE-2022-50219

RHSA-2020:4431

RHSA-2020_4431

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50219.json · Exploit
• https://git.kernel.org/stable/c/3527e3cbb84d8868c4d4e91ba55915f96d39ec3d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50219 · Security Note
• https://git.kernel.org/stable/c/be001f9da71eaa3b61e186fb88bde3279728bdca · Patch
• https://git.kernel.org/stable/c/4c46091ee985ae84c60c5e95055d779fcd291d87 · Patch
• https://ubuntu.com/security/CVE-2022-50219 · Vendor Advisory
• https://git.kernel.org/stable/c/1f8ca9c40e6222ce431e9ba5dae3cccce8ef9443 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50219 · Vendor Advisory
• https://git.kernel.org/stable/c/6336388715afa419cc97d0255bda3bba1b96b7ca · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50219 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50219 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50219 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50219 · Security Note
• https://t.me/cvetracker/26491 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note