PT-2025-37568 · Linux+2 · Linux+2

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-50266

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions linux (affected versions not specified)

Description A flaw was discovered in the Linux kernel related to kprobes. Specifically, the check within kill kprobe() to determine if disarm kprobe ftrace() needs to be called consistently fails. This occurs because the KPROBE FLAG GONE flag is set for the kprobe before the check, resulting in !kprobe disabled(p) always evaluating to false. This issue stems from a previous fix intended to address a NULL pointer dereference in kprobe ftrace handler introduced by commit 0cb2f1372baa. Without correctly disarming the probe when enabled, the original NULL pointer dereference problem persists.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-71197

BDU:2026-06071

CVE-2022-50266

OESA-2025-2349

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Debian

Linux

Suse

References · 1005

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50266.json · Exploit
• https://git.kernel.org/stable/c/f20a067f13106565816b4b6a6b665b2088a63824 · Patch
• https://bdu.fstec.ru/vul/2026-06071 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53221 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53386 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50266 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38695 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39813 · Security Note
• https://ubuntu.com/security/CVE-2022-50266 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39773 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53149 · Security Note
• https://git.kernel.org/stable/c/c909985dd0c0f74b61e3f8f0e04bf8aa9c8b97c7 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2349 · Vendor Advisory