PT-2025-38010 · Xfstests+5 · Xfstests+5

Published 2022-12-12 · Updated 2025-10-24 · CVE-2022-50341

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to encryption within the CIFS implementation. Specifically, an oops condition can occur during encryption processes, potentially triggered when running xfstests against Azure on arm64 systems. This issue arises from attempting to write to a buffer allocated in the stack, crossing a page boundary within the scatterwalk copychunks() function. The root cause involves incorrect handling of virtual memory allocation and offsets when copying data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2026-02265

CESA-2024_8856

CVE-2022-50341

OESA-2025-2533

RHSA-2023:6583

RHSA-2023_6583

RHSA-2024:10772

RHSA-2024:8856

RHSA-2024_8856

RHSA-2025:22006

RHSA-2025:22066

RHSA-2025:22072

RHSA-2025:22087

RHSA-2026:1886

RHSA-2026:2664

Affected Products

Astra Linux

Azure

Centos

Linux Kernel

Red Hat

Xfstests

References · 49

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50341.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53357 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53431 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38449 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50430 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50427 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-22910.html · Vendor Advisory
• https://git.kernel.org/stable/c/a13e51760703f71c25d5fc1f4a62dfa4b0cc80e9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-39898 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53322 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37792 · Security Note
• https://git.kernel.org/stable/c/fe6ea044c4f05706cb71040055b1c70c6c8275e0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-39697 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50449 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50402 · Security Note