PT-2025-37490 · Linux+3 · Linux Kernel+3

Published 2022-10-12 · Updated 2026-04-20 · CVE-2022-50234

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s io uring/af unix functionality related to the garbage collection of registered files. The issue involves deferring the garbage collection of registered files to the io uring release process instead of handling it within the unix gc() function. This can lead to improper cleanup and potential resource leaks when io uring releases its registered files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-19

Related Identifiers

BDU:2026-05950

CVE-2022-50234

RHSA-2023:6583

SUSE-SU-2025:03613-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 888

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50234.json · Exploit
• https://git.kernel.org/stable/c/c378c479c5175833bb22ff71974cda47d7b05401 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50234 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://git.kernel.org/stable/c/04df9719df1865f6770af9bc7880874af0e594b2 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://git.kernel.org/stable/c/75e94c7e8859e58aadc15a98cc9704edff47d4f2 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50234 · Vendor Advisory
• https://git.kernel.org/stable/c/b4293c01ee0d0ecdd3cb5801e13f62271144667a · Patch
• https://git.kernel.org/stable/c/0091bfc81741b8d3aeb3b7ab8636f911b2de6e80 · Patch
• https://ubuntu.com/security/CVE-2022-50234 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://git.kernel.org/stable/c/813d8fe5d30388f73a21d3a2bf46b0a1fd72498c · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50234 · Vendor Advisory