PT-2025-37593 · Linux+2 · Linux Kernel+2

CVE-2022-50291 · Published 2022-10-20 · Updated 2025-10-16

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-syzkaller-12189-g19d17ab7c68b-dirty

Description The Linux kernel contained a data race condition related to kcm->rx psock. Specifically, kcm->rx psock could be read without a lock in the kcm rfree() function. This issue was identified through Kernel Concurrency Sanitizer (KCSAN) reporting and addressed with annotations to properly synchronize read and write operations. The data race occurred during operations involving unreserve rx kcm and kcm rcv strparser, potentially leading to unpredictable behavior or system instability.

Recommendations Update the Linux kernel to version 6.0.0-syzkaller-12189-g19d17ab7c68b-dirty or a later version to resolve this issue.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-371

CWE-362

Related Identifiers

BDU:2026-08842

CVE-2022-50291

SUSE-SU-2025:03614-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 420

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50291.json · Exploit
• https://git.kernel.org/stable/c/c325f92d8d9b223d5842609ca067e898e9d34566 · Patch
• https://git.kernel.org/stable/c/13dba69e18d04c8eec7596369f2a0596b0260275 · Patch
• https://git.kernel.org/stable/c/1b8a5692ab25db4ef1c2cc8e5d21f7a65dc3d079 · Patch
• https://git.kernel.org/stable/c/bf46af730e58d340f6f740bc69a07c5f6b85c655 · Patch
• https://osv.dev/vulnerability/CVE-2022-50291 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50291 · Vendor Advisory
• https://git.kernel.org/stable/c/342d918cf9a45df9cf11bbe7162b851adefd178f · Patch
• https://git.kernel.org/stable/c/e94395e916b48a5b912a0a04570981b5b091acb0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50291 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50291 · Vendor Advisory
• https://git.kernel.org/stable/c/12a0eb340c9a22e0f8c00d2c0c1a60695ead926a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/15e4dabda11b0fa31d510a915d1a580f47dfc92e · Patch
• https://bdu.fstec.ru/vul/2026-08842 · Security Note