PT-2025-37601 · Linux+5 · Linux Kernel+5

Published 2022-09-21 · Updated 2025-10-24 · CVE-2022-50299

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.0-1085-azure #90~18.04.1-Ubuntu

Description The Linux kernel contained an issue where the snprintf function was used instead of scnprintf in the md (multiple device) module. This could lead to a warning when the total characters in block device names plus slashes exceeded 200, potentially causing a buffer overflow due to the wrapping around of the calculation “200 – len”. The issue was addressed by replacing snprintf with scnprintf, which accurately returns the number of characters written into the buffer.

Recommendations Update the Linux kernel to version 5.4.0-1085-azure #90~18.04.1-Ubuntu or a later version to resolve this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2026-06079

CESA-2023_2951

CVE-2022-50299

OESA-2025-2533

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:03613-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 1038

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50299.json · Exploit
• https://git.kernel.org/stable/c/897b1450abe5a67c842a5d24173ce4449ccdfa94 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50449 · Security Note
• https://git.kernel.org/stable/c/76694e9ce0b2238c0a5f3ba54f9361dd3770ec78 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50299 · Vendor Advisory
• https://git.kernel.org/stable/c/3b0a2bd51f60418ecd67493586a2bb2174199de3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53357 · Security Note
• https://git.kernel.org/stable/c/5d8259c9d1915a50c60c7d6e9e7fb9b7da64a175 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53506 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39998 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53299 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53560 · Security Note
• https://git.kernel.org/stable/c/97238b88583c27c9d3b4a0cedb45f816523f17c3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-39697 · Security Note