PT-2025-38338 · Linux+4 · Linux Kernel+4

Published 2025-09-18 · Updated 2026-05-26 · CVE-2022-50390

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to undefined behavior in a bit shift operation within the DRM/TTM subsystem. Specifically, shifting a signed 32-bit value by 31 bits can lead to undefined behavior. The issue occurs due to the use of a signed integer in a bit shift operation where the shift amount is equal to or greater than the number of bits in the integer. This can occur when handling the TTM TT FLAG PRIV POPULATED flag. The vulnerability was identified through UBSAN (Undefined Behavior Sanitizer) warnings during kernel operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-06029

CVE-2022-50390

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Centos

Debian

Linux Kernel

Red Hat

Suse

References · 840

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50390.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50390 · Security Note
• https://git.kernel.org/stable/c/387659939c00156f8d6bab0fbc55b4eaf2b6bc5b · Patch
• https://bdu.fstec.ru/vul/2026-06029 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50390 · Vendor Advisory
• https://git.kernel.org/stable/c/6528971fdce0dfc0a28fec42c151a1eccdabadf5 · Patch
• https://ubuntu.com/security/CVE-2022-50390 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50390 · Vendor Advisory
• https://git.kernel.org/stable/c/2ff0309b73d86e8591881ac035af06e01c112e89 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50390 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50390 · Vendor Advisory
• https://git.kernel.org/stable/c/c4079a34c0adef9f35a16783fb13a9084406f96d · Patch
• https://osv.dev/vulnerability/CVE-2022-50390 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory