PT-2025-37497 · Linux+3 · Linux Kernel+3

Published 2023-05-09 · Updated 2025-11-24 · CVE-2022-50243

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Linux kernel's SCTP implementation. Specifically, the vulnerability occurs when handling errors returned from the sctp auth asoc init active key() function. If this function returns an error, the active key is not updated correctly, leading to a potential use-after-free when sending packets. The issue was identified by syzbot and involves the sctp auth shkey hold() function within net/sctp/auth.c, as well as sctp sendmsg to asoc() in net/sctp/socket.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CESA-2023_2951

CVE-2022-50243

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023:7398

RHSA-2023_2458

RHSA-2023_2951

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50243.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50243 · Vendor Advisory
• https://git.kernel.org/stable/c/022152aaebe116a25c39818a07e175a8cd3c1e11 · Patch
• https://git.kernel.org/stable/c/f65955340e0044f5c41ac799a01698ac7dee8a4e · Patch
• https://git.kernel.org/stable/c/3b0fcf5e29c0940e1169ce9c44f73edd98bdf12d · Patch
• https://git.kernel.org/stable/c/382ff44716603a54f5fd238ddec6a2468e217612 · Patch
• https://git.kernel.org/stable/c/19d636b663e0e92951bba5fced929ca7fd25c552 · Patch
• https://git.kernel.org/stable/c/b8fa99a3a11bdd77fef6b4a97f1021eb30b5ba40 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50243 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50243 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50243 · Security Note
• https://git.kernel.org/stable/c/0f90099d18e3abdc01babf686f41f63fe04939c1 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50243 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50243 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50243 · Vendor Advisory