PT-2025-37625 · Linux+2 · Linux Kernel+2

Published 2022-10-27 · Updated 2025-10-23 · CVE-2022-50323

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw was identified in the Linux kernel where skb append pagefrags() does not properly handle pfmemalloc status. This issue impacts the af unix and udp sendpage() implementations. The vulnerability can lead to a data race condition as reported by Kernel Concurrency Sanitizer (KCSAN), potentially resulting in system instability or unexpected behavior. The issue arises from incorrectly sensing pfmemalloc status for pages owned by user space and failing to use skb fill page desc noacc() in skb append pagefrags().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-664

Related Identifiers

BDU:2026-03940

CVE-2022-50323

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 834

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50323.json · Exploit
• https://bdu.fstec.ru/vul/2026-03940 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50323 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://git.kernel.org/stable/c/847a2859814b31392340a2b16604b25afaa92dcc · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50323 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50323 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50323 · Vendor Advisory
• https://git.kernel.org/stable/c/228ebc41dfab5b5d34cd76835ddb0ca8ee12f513 · Patch
• https://git.kernel.org/stable/c/92b4c5c3fa810212da20088bcc6c0a77fc8607bd · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50323 · Security Note
• https://ubuntu.com/security/CVE-2022-50323 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50323 · Security Note
• https://suse.com/security/cve/CVE-2023-53449 · Note