PT-2025-38166 · Linux+4 · Linux Kernel+4

Published 2022-10-19 · Updated 2025-11-24 · CVE-2022-50356

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the networking scheduler (sfb) where a null pointer dereference can occur when sfb init() fails during the initialization of the default queue discipline (qdisc). Specifically, if the qdisc of dev queue fails to initialize during mqprio init(), sfb reset() is invoked, leading to a null pointer access when attempting to access q->qdisc. This can result in a general protection fault. The call trace indicates the issue originates within the qdisc reset() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-02435

CESA-2023_7077

CVE-2022-50356

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

RHSA-2025:21051

RHSA-2025:21083

RHSA-2025:21091

RHSA-2025:21128

RHSA-2025:21136

RHSA-2025:23947

RHSA-2025:23960

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

SUSE-SU-2025:4189-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1096

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50356.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50356 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02435 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50356 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-23947.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4189-1 · Vendor Advisory
• https://git.kernel.org/stable/c/c2e1e59d59fafe297779ceae1fe0e6fbebc3e745 · Patch
• https://git.kernel.org/stable/c/723399af2795fb95687a531c9480464b5f489333 · Patch
• https://git.kernel.org/stable/c/2a3fc78210b9f0e85372a2435368962009f480fc · Patch
• https://ubuntu.com/security/CVE-2022-50356 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50356 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50356 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50356 · Security Note
• https://git.kernel.org/stable/c/ded86c4191a3c17f8200d17a7d8a6f63b74554ae · Patch