PT-2025-38018 · Linux+2 · Linux Kernel+2

Published 2022-11-23 · Updated 2025-11-14 · CVE-2022-50349

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the tifm 7xx1 switch media() function. If device register() returns an error, the name of the kobject allocated in dev set name() called in device add() is leaked. It is crucial to always use put device() to release the reference initialized instead of directly freeing @dev after calling device register(), even if it returns an error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

BDU:2026-05973

CVE-2022-50349

OESA-2025-2659

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1025

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50349.json · Exploit
• https://bdu.fstec.ru/vul/2026-05973 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50484 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39782 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53641 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50349 · Vendor Advisory
• https://git.kernel.org/stable/c/ee2715faf7e7153f5142ed09aacfa89a64d45dcb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53427 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53185 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53582 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53446 · Security Note
• https://git.kernel.org/stable/c/d861b7d41b17942b337d4b87a70de7cd1dc44d4e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50352 · Security Note
• https://ubuntu.com/security/CVE-2022-50349 · Vendor Advisory