PT-2025-38344 · Linux+4 · Linux Kernel+4

Published 2022-12-26 · Updated 2025-10-23 · CVE-2022-50396

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak within the tcindex set parms function, specifically when changing existing filter properties. The issue arises when an old filter result is cleared using tcindex filter result init() without properly destroying its associated tcf exts structure, leading to a memory leak. This occurs when the old r value is retrieved from p->perfect, triggering the allocation of new filter results and subsequent clearing of the old result without deallocation. The vulnerability was identified through Syzkaller testing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025_16880

BDU:2026-02438

CESA-2023_7077

CVE-2022-50396

RHSA-2023:2458

RHSA-2023:4130

RHSA-2023:7077

RHSA-2023_2458

RHSA-2023_7077

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 974

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50396.json · Exploit
• https://git.kernel.org/stable/c/c4de6057e7c6654983acb63d939d26ac0d7bbf39 · Patch
• https://git.kernel.org/stable/c/55ac68b53f1cea1926ee2313afc5d66b91daad71 · Patch
• https://git.kernel.org/stable/c/01d0d2b8b4e3cf2110baba9371c0c3d04ad5c77b · Patch
• https://git.kernel.org/stable/c/3abebc503a5148072052c229c6b04b329a420ecd · Patch
• https://git.kernel.org/stable/c/399ab7fe0fa0d846881685fd4e57e9a8ef7559f7 · Patch
• https://git.kernel.org/stable/c/372ae77cf11d11fb118cbe2d37def9dd5f826abd · Patch
• https://git.kernel.org/stable/c/7a6fb69bbcb21e9ce13bdf18c008c268874f0480 · Patch
• https://git.kernel.org/stable/c/facc4405e8b7407e03216207b1d1d640127de0c8 · Patch
• https://ubuntu.com/security/CVE-2022-50396 · Vendor Advisory
• https://git.kernel.org/stable/c/b314f6c3512108d7a656c5caf07c82d1bbbdc0f1 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50396 · Security Note
• https://git.kernel.org/stable/c/53af9c793f644d5841d84d8e0ad83bd7ab47f3e0 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory