PT-2025-37580 · Linux+2 · Linux Kernel+2

Published 2022-11-22 · Updated 2025-10-23 · CVE-2022-50278

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was identified in the pnp alloc dev() function within the Linux kernel's PNP (Plug and Play) subsystem. The issue stemmed from dynamically allocated device names not being properly freed after a specific commit (1fa5ae857bb1, "driver core: get rid of struct device's bus id string array"). This occurred because the device name was allocated before the PNP ID was added, leading to a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-03769

CVE-2022-50278

OESA-2025-2468

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1016

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50278.json · Exploit
• https://git.kernel.org/stable/c/ea77b4b761cd75e5456f677311babfa0418f289a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53229 · Security Note
• https://git.kernel.org/stable/c/c12b314bb23dc0c83e03402cc84574700947e3b2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53480 · Security Note
• https://git.kernel.org/stable/c/693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53220 · Security Note
• https://git.kernel.org/stable/c/1f50c7497a5f89de0c31f2edf086af41ff834320 · Patch
• https://git.kernel.org/stable/c/bbcf772216aa237036cc3ae3158288d0a95aaf4d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50347 · Security Note
• https://git.kernel.org/stable/c/dac87e295cddc8ab316cff14ab2071b5221d84fa · Patch
• https://bdu.fstec.ru/vul/2026-03769 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50278 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50278 · Security Note
• https://ubuntu.com/security/CVE-2022-50278 · Vendor Advisory