PT-2025-38175 · Linux+2 · Linux Kernel+2

Published 2022-12-16 · Updated 2025-10-16 · CVE-2022-50365

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to skbuff (socket buffer) handling during pull operations. Extending the tail of a skbuff can lead to unexpected behavior when using helpers like BPF FUNC skb pull data to read partial content beyond the skb headlen, particularly in scenarios involving GSO (Generic Segmentation Offload) frag lists that are linear with no head frag. This can result in a kernel BUG at net/core/skbuff.c:4219.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-05975

CVE-2022-50365

RHSA-2023:7077

SUSE-SU-2025:03614-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 423

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50365.json · Exploit
• https://git.kernel.org/stable/c/8fb773eed4909ef5dc1bbeb3629a337d3336df7e · Patch
• https://git.kernel.org/stable/c/2d59f0ca153e9573ec4f140988c0ccca0eb4181b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50365 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50365 · Vendor Advisory
• https://git.kernel.org/stable/c/821be5a5ab09a40ba09cb5ba354f18cf7996fea0 · Patch
• https://ubuntu.com/security/CVE-2022-50365 · Vendor Advisory
• https://git.kernel.org/stable/c/668dc454bcbd1da73605201ff43f988c70848215 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50365 · Security Note
• https://git.kernel.org/stable/c/331615d837f4979eb91a336a223a5c7f7886ecd5 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50365 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6ac417d71b80e74b002313fcd73f7e9008e8e457 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50365 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50365 · Vendor Advisory