PT-2025-37596 · Linux+3 · Linux Kernel+3

Published 2022-12-14 · Updated 2025-12-03 · CVE-2022-50294

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was identified in the lbs init adapter() function within the Libertas wireless driver. Specifically, when the kfifo alloc() function failed, the command buffer was not released, leading to a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

BDU:2026-03768

CVE-2022-50294

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Libertas Wireless Driver

Linux Kernel

Suse

References · 995

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50294.json · Exploit
• https://git.kernel.org/stable/c/653d13a73e498d0bb6aeaf689aaa960defa7878b · Patch
• https://git.kernel.org/stable/c/037f84c0bfae5c436c651d0e804264e2648010ec · Patch
• https://bdu.fstec.ru/vul/2026-03768 · Security Note
• https://git.kernel.org/stable/c/4c102ad59bfa66c0f6662af64fa3b9007b02c20f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50294 · Security Note
• https://git.kernel.org/stable/c/23b34e08de5c2380414c9d3c33e8235094bcccae · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50294 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://git.kernel.org/stable/c/98e0ff6980c89239d9e5d3da90d791c2383dc23a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/d46c33f667b05c22bc5c5b69aa730349c4b6fe31 · Patch
• https://git.kernel.org/stable/c/9c8f50c7433bdfba1588831c413136ecc3f29f99 · Patch
• https://git.kernel.org/stable/c/16a03958618fb91bb1bc7077cf3211055162cc2f · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory