PT-2025-38008 · Linux+2 · Linux Kernel+2

Published 2022-09-14 · Updated 2025-10-23 · CVE-2022-50339

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to Bluetooth functionality. Specifically, a race condition can occur within the mgmt init hdev() function due to the lack of serialization via hci dev lock(). This race condition involves attempting to cancel an uninitialized work item at mgmt index removed(). The issue arises from concurrent access to the HCI MGMT flag during initialization and removal processes. The local fix involves splitting hci dev test and set flag() into hci dev test flag() and hci dev set flag() and setting the HCI MGMT flag after INIT DELAYED WORK() completes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2026-03776

CVE-2022-50339

RHSA-2023:2458

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 831

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50339.json · Exploit
• https://bdu.fstec.ru/vul/2026-03776 · Security Note
• https://git.kernel.org/stable/c/f74ca25d6d6629ffd4fd80a1a73037253b57d06b · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50339 · Vendor Advisory
• https://git.kernel.org/stable/c/e53c6180db8dd09de94e0a3bdf4fef6f5f9dd6e6 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50339 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50339 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50339 · Security Note
• https://ubuntu.com/security/CVE-2022-50339 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50339 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50339 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://bugzilla.suse.com/1250814 · Note
• https://bugzilla.suse.com/1250106 · Note