PT-2025-37576 · Linux+3 · Linux Kernel+3

Published 2022-11-25 · Updated 2025-09-29 · CVE-2022-50274

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a use-after-free issue within the dvbdev module. The dvb unregister device() function can release the dvb device structure while pointers in file->private data still reference it, leading to a use-after-free condition. A reference counter has been added to the struct dvb device to delay deallocation until all pointers referencing the object are removed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-911

CWE-416

Related Identifiers

ALSA-2025_16880

BDU:2026-02176

CESA-2024_3138

CVE-2022-50274

RHSA-2023:7398

RHSA-2024:3138

RHSA-2024_3138

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50274.json · Exploit
• https://git.kernel.org/stable/c/ac521bbe3d00fa574e66a9361763f2b37725bc97 · Patch
• https://git.kernel.org/stable/c/2abd73433872194bccdf1432a0980e4ec5273c2a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50274 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50274 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50274 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02176 · Security Note
• https://git.kernel.org/stable/c/6d18b44bb44e1f4d97dfe0efe92ac0f0984739c2 · Patch
• https://git.kernel.org/stable/c/9945d05d6693710574f354c5dbddc47f5101eb77 · Patch
• https://osv.dev/vulnerability/CVE-2022-50274 · Vendor Advisory
• https://git.kernel.org/stable/c/88a6f8a72d167294c0931c7874941bf37a41b6dd · Patch
• https://cve.org/CVERecord?id=CVE-2022-50274 · Security Note
• https://git.kernel.org/stable/c/0fc044b2b5e2d05a1fa1fb0d7f270367a7855d79 · Patch
• https://git.kernel.org/stable/c/a2f0a08aa613176c9688c81d7b598a7779974991 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50274 · Security Note