PT-2025-37612 · Linux+1 · Linux Kernel+1

Published 2022-10-18 · Updated 2025-09-20 · CVE-2022-50310

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue was identified in the ip6mr sk done() function within the Linux kernel. This occurs when addrconf init net() fails, leading to the release of a pointer (devconf) that is subsequently accessed in ip6mr sk done(), resulting in invalid pointer access. The vulnerability is triggered during network namespace creation via the unshare system call. The call trace indicates the issue arises from memory being freed prematurely, and then subsequently accessed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Improper Initialization

Weakness Enumeration

CWE-416

CWE-665

Related Identifiers

BDU:2026-03775

CVE-2022-50310

Affected Products

Astra Linux

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50310.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50310 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50310 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50310 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50310 · Security Note
• https://git.kernel.org/stable/c/22a68c3b9362eaac7b035eba09e95e6b3f7a912c · Patch
• https://bdu.fstec.ru/vul/2026-03775 · Security Note
• https://git.kernel.org/stable/c/1ca695207ed2271ecbf8ee6c641970f621c157cc · Patch
• https://ubuntu.com/security/CVE-2022-50310 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50310 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50310 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.6 · Note
• https://git.kernel.org/linus/1ca695207ed2271ecbf8ee6c641970f621c157cc · Note
• https://twitter.com/CVEnew/status/1969482379803967521 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note