PT-2025-37633 · Linux+2 · Linux Kernel+2

Published 2022-10-19 · Updated 2025-10-23 · CVE-2022-50331

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was resolved in the wwan hwsim module within the Linux kernel. Specifically, a fault injection during module probing could lead to a memory leak in the wwan hwsim dev new() function if device register() failed but the kobject reference count was not decremented to zero. This resulted in a leaked name allocated in dev set name(). The issue was addressed by calling put device(), ensuring the name is freed in the kobject cleanup() callback function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-03938

CVE-2022-50331

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 861

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50331.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50331 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50331 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50331 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03938 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50331 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/d87973314aba6de80a49f4271dd9be4ddc08e729 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50331 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50331 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50331 · Vendor Advisory
• https://git.kernel.org/stable/c/50c31fa952309536c6e4461ff815ddccc8dff9d5 · Patch