PT-2025-38183 · Linux+3 · Linux Kernel+3

Published 2022-08-15 · Updated 2026-03-14 · CVE-2022-50373

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Distributed Lock Manager (DLM) lowcomms functionality within the Linux kernel. Specifically, a race can occur between queue work() in the dlm lowcomms commit msg() function and srcu read unlock(). This race can lead to a situation where the final reference to a dlm msg is taken by queue work(), resulting in garbage data being used, as indicated by a kernel warning. The issue was reproduced using the dlm locktorture test, which is not part of the upstream kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

CWE-911

Related Identifiers

BDU:2026-03325

CVE-2022-50373

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 865

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50373.json · Exploit
• https://git.kernel.org/stable/c/27d3e646dd83bafd7094890462eebfce3ac31e4a · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50373 · Vendor Advisory
• https://git.kernel.org/stable/c/30ea3257e8766027c4d8d609dcbd256ff9a76073 · Patch
• https://git.kernel.org/stable/c/eb97e60a9eae632ff9104a580dbc4fdc58dc23cb · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50373 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50373 · Vendor Advisory
• https://git.kernel.org/stable/c/de7fdff754bb4d01e38e19964c309b6df6a79472 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50373 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50373 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50373 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory