PT-2025-37583 · Linux+1 · Linux Kernel+1

Published 2022-09-19 · Updated 2025-12-04 · CVE-2022-50281

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a platform-device leak in the bridge platform create() function when handling errors during device creation. Specifically, the vulnerability occurs when platform device add(), platform device add data(), or platform device add resources() fail. In these cases, the allocated platform device (pdev) is not released, leading to a memory leak. The fix involves calling platform device put() to release the failed pdev, which is divided into pdev wd and pdev bd. Additionally, platform device unregister() is used to release resources associated with sgi w1 when xtalk-bridge registration fails.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-03771

CVE-2022-50281

Affected Products

Astra Linux

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50281.json · Exploit
• https://git.kernel.org/stable/c/48025893b3e31b917ad654d28d23fff66681cac4 · Patch
• https://git.kernel.org/stable/c/d7ac29e60d0ff71e9e414af595b8c92800f7fa90 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50281 · Security Note
• https://git.kernel.org/stable/c/11bec9cba4de06b3c0e9e4041453c2caaa1cbec1 · Patch
• https://git.kernel.org/stable/c/da2aecef866b476438d02c662507a0e4e818da9d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50281 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50281 · Vendor Advisory
• https://git.kernel.org/stable/c/93296e7ab774230b7c36541dead10b6da39b650f · Patch
• https://ubuntu.com/security/CVE-2022-50281 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50281 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03771 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50281 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50281 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.17 · Note