PT-2025-37492 · Linux+2 · Linux Kernel+2

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-50236

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the iommu/mediatek component where a crash can occur on interrupt service routine (isr) after a kernel execution (kexec) operation. This happens when the system is rebooted via isr(), potentially triggering the IRQ handler before the domain is initialized, leading to an invalid memory access error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2022-50236

SUSE-SU-2025:4189-1

Affected Products

Debian

Linux Kernel

Suse

References · 305

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50236.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50236 · Vendor Advisory
• https://git.kernel.org/stable/c/f13acee780cedb3e06a6dadf64d9104cccd2b9fc · Patch
• https://cve.org/CVERecord?id=CVE-2022-50236 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50236 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50236 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4189-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50236 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50236 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50236 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50236 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50236 · Vendor Advisory
• https://git.kernel.org/stable/c/00ef8885a945c37551547d8ac8361cacd20c4e42 · Patch
• https://git.kernel.org/stable/c/85cc8a187f2de7a91e2cea522e9406fa12999269 · Patch
• https://suse.com/security/cve/CVE-2023-53695 · Note