PT-2025-37573 · Linux+4 · Linux Kernel+4

Published 2022-09-29 · Updated 2025-10-23 · CVE-2022-50271

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw was discovered in the Linux kernel's vhost/vsock implementation. The issue relates to page allocation failures when copying large files over sftp over vsock, specifically when attempting to allocate multiple 32kB regions using kmalloc. This can occur when handling large packets. The resolution involves utilizing kvmalloc and kvfree instead.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-789

Related Identifiers

BDU:2026-05956

CVE-2022-50271

RHSA-2023:2458

RHSA-2023:2951

SUSE-SU-2025:03613-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1013

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50271.json · Exploit
• https://git.kernel.org/stable/c/a99fc6d818161d6f1ff3307de8bf5237f6cc34d8 · Patch
• https://git.kernel.org/stable/c/0e3f72931fc47bb81686020cc643cde5d9cd0bb8 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50271 · Vendor Advisory
• https://git.kernel.org/stable/c/36c9f340c60413e28f980c0224c4e9d35851526b · Patch
• https://git.kernel.org/stable/c/7aac8c63f604e6a6a46560c0f0188cd0332cf320 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/e28a4e7f0296824c61a81e7fd54ab48bad3e75ad · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50271 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/e6d0152c95108651f1880c1ddfab47cb9e3e62d0 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50271 · Vendor Advisory
• https://git.kernel.org/stable/c/0d720c3f0a03e97867deab7e480ba3d3e19837ba · Patch
• https://git.kernel.org/stable/c/b4a5905fd2ef841cd61e969ea692c213c2e5c1f7 · Patch