PT-2025-37606 · Linux+2 · Linux Kernel+2

Published 2022-11-07 · Updated 2026-04-20 · CVE-2022-50304

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the init mtd() function within the MTD core subsystem. A resource leak can occur during initialization, potentially leading to errors when registering the MTD class or block device interface (BDI). Specifically, if init mtdchar() fails, mtd bdi may not be unregistered, preventing subsequent module loading. This issue can manifest as an error message indicating a duplicate filename in sysfs and failure to register the MTD class or BDI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-71350

BDU:2026-05958

CVE-2022-50304

SUSE-SU-2025:03614-1

Affected Products

Debian

Linux Kernel

Suse

References · 414

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50304.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/78816504100cbd8e6836df9f58cc4fbb8b262f1c · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50304 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50304 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50304 · Security Note
• https://git.kernel.org/stable/c/26c304a3f136009c5a2a04e2bf3ac6aa25aabcb4 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50304 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05958 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50304 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-71350 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50304 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50304 · Vendor Advisory
• https://git.kernel.org/stable/c/1aadf01e5076b9ab6bf294b9622335c651314895 · Patch
• https://osv.dev/vulnerability/CVE-2022-50304 · Vendor Advisory