PT-2025-38165 · Linux+2 · Linux Kernel+2

Published 2025-09-17 · Updated 2025-10-23 · CVE-2022-50355

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the vt6655 driver related to memory cleanup loops during initialization. Specifically, the driver allocates memory using an index variable that increments, but the cleanup code decrements the same variable, leading to potential memory leaks when the index reaches zero and invalid memory access when allocation fails from the start. One of these loops was previously fixed, and this addresses the remaining issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2022-50355

SUSE-SU-2025:03613-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 879

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50355.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50355 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50355 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50355 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f19e5b7df54590c831f350381963f25585c8f7d5 · Patch
• https://git.kernel.org/stable/c/88b9cc60f26e8a05d1ddbddf91b09ca2915f20e0 · Patch
• https://git.kernel.org/stable/c/a9e9806d1c315bc50dce05479a079b9a104474b8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50355 · Security Note
• https://git.kernel.org/stable/c/637672a71f5016a40b0a6c0f3c8ad25eacedc8c3 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/2a2db520e3ca5aafba7c211abfd397666c9b5f9d · Patch