PT-2025-37585 · Linux+1 · Linux Kernel+1

Published 2025-09-15 · Updated 2025-09-15 · CVE-2022-50283

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc7-next-20220930-04543-g8cf3f7

Description A flaw was discovered in the Linux kernel's mtd core code related to dynamic partitions. The vulnerability is due to a missing of node get() call, leading to an unbalanced of node put() and a potential use-after-free condition. This can result in a kernel panic.

Recommendations Update to Linux kernel version 6.0.0-rc7-next-20220930-04543-g8cf3f7 or a later version that includes the fix.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2022-50283

Affected Products

Astra Linux

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50283.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50283 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50283 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50283 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50283 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50283 · Security Note
• https://git.kernel.org/stable/c/12b58961de0bd88b3c7dfa5d21f6d67f4678b780 · Patch
• https://ubuntu.com/security/CVE-2022-50283 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50283 · Vendor Advisory
• https://git.kernel.org/stable/c/9e54ce00505d291ef88f2c05e5eef46269daf83c · Patch
• https://twitter.com/CVEnew/status/1967602108993024122 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/12b58961de0bd88b3c7dfa5d21f6d67f4678b780 · Note