PT-2025-38182 · Linux+4 · Linux Kernel+4

Published 2022-10-18 · Updated 2025-10-23 · CVE-2022-50372

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists within the CIFS implementation when building the NTLMSSP negotiate blob fails during session setup. Specifically, the session setup request is not freed, leading to a memory leak when mounting CIFS. The issue occurs during the SMB2 sess auth rawntlmssp negotiate function and impacts the allocation of memory via mempool alloc.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-02052

CESA-2024_5101

CVE-2022-50372

RHSA-2023:6583

RHSA-2023_6583

RHSA-2024:5101

RHSA-2024_5101

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 984

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50372.json · Exploit
• https://git.kernel.org/stable/c/fa5a70bdd5e565c8696fb04dfe18a4e8aff4695d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50372 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50372 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50372 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02052 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50372 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50372 · Security Note
• https://git.kernel.org/stable/c/30b2d7f8f13664655480d6af45f60270b3eb6736 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50372 · Vendor Advisory