PT-2025-37607 · Linux+1 · Linux Kernel+1

Published 2022-12-05 · Updated 2025-09-20 · CVE-2022-50305

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ASoC sof es8336 driver. The sof es8336 remove() function calls cancel delayed work(), which does not guarantee completion of the associated work function before the driver's remove function finishes. This can lead to a use-after-free condition if the callback function continues to execute after the driver has been removed. The issue is addressed by using cancel delayed work sync(), which ensures the work is cancelled and cannot be rescheduled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Race Condition

Weakness Enumeration

CWE-416

CWE-362

Related Identifiers

BDU:2026-02048

CVE-2022-50305

Affected Products

Linux Kernel

Sof Es8336

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50305.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50305 · Vendor Advisory
• https://git.kernel.org/stable/c/b85102a3aa3810a09eb55692e8cd6ffbb304e57d · Patch
• https://ubuntu.com/security/CVE-2022-50305 · Vendor Advisory
• https://git.kernel.org/stable/c/390a1a98288a53b2e7555097d83c6e55d579b166 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50305 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50305 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02048 · Security Note
• https://git.kernel.org/stable/c/1b41beaa7a58467505ec3023af8aad74f878b888 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50305 · Security Note
• https://twitter.com/CVEnew/status/1969482384811966864 · Twitter Post
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.2 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/1b41beaa7a58467505ec3023af8aad74f878b888 · Note
• https://access.redhat.com/security/cve/cve-2022-50305 · Note