PT-2025-37593 · Linux+2 · Linux Kernel+2

Published 2025-09-15 · Updated 2025-10-16 · CVE-2022-50291

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-syzkaller-12189-g19d17ab7c68b-dirty

Description The Linux kernel contained a data race condition related to kcm->rx psock. Specifically, kcm->rx psock could be read without a lock in the kcm rfree() function. This issue was identified through Kernel Concurrency Sanitizer (KCSAN) reporting and addressed with annotations to properly synchronize read and write operations. The data race occurred during operations involving unreserve rx kcm and kcm rcv strparser, potentially leading to unpredictable behavior or system instability.

Recommendations Update the Linux kernel to version 6.0.0-syzkaller-12189-g19d17ab7c68b-dirty or a later version to resolve this issue.

Exploit

Fix

Related Identifiers

CVE-2022-50291

SUSE-SU-2025:03614-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 412

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50291.json · Exploit
• https://git.kernel.org/stable/c/1b8a5692ab25db4ef1c2cc8e5d21f7a65dc3d079 · Patch
• https://ubuntu.com/security/CVE-2022-50291 · Vendor Advisory
• https://git.kernel.org/stable/c/12a0eb340c9a22e0f8c00d2c0c1a60695ead926a · Patch
• https://git.kernel.org/stable/c/15e4dabda11b0fa31d510a915d1a580f47dfc92e · Patch
• https://git.kernel.org/stable/c/bf46af730e58d340f6f740bc69a07c5f6b85c655 · Patch
• https://osv.dev/vulnerability/CVE-2022-50291 · Vendor Advisory
• https://git.kernel.org/stable/c/c325f92d8d9b223d5842609ca067e898e9d34566 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50291 · Vendor Advisory
• https://git.kernel.org/stable/c/e94395e916b48a5b912a0a04570981b5b091acb0 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50291 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/342d918cf9a45df9cf11bbe7162b851adefd178f · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50291 · Vendor Advisory
• https://git.kernel.org/stable/c/13dba69e18d04c8eec7596369f2a0596b0260275 · Patch