PT-2025-38423 · Linux+4 · Linux Kernel+4

Published 2022-10-02 · Updated 2026-05-26 · CVE-2022-50406

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc5-djwa #rc5 3004c9f1de887ebae86015f2677638ce51ee7

Description The Linux kernel contained a vulnerability in the iomap subsystem that could lead to memory corruption when recording errors during writeback. This issue was observed as a kernel NULL pointer dereference and Buffer I/O errors on devices like dm-0, potentially causing system crashes and data loss. The vulnerability occurs during writeback operations and can be triggered by errors encountered during I/O.

Recommendations Update the Linux kernel to a version newer than 6.0.0-rc5-djwa #rc5 3004c9f1de887ebae86015f2677638ce51ee7.

Exploit

Fix

DoS

Improper Resource Release

Memory Corruption

NULL Pointer Dereference

Weakness Enumeration

CWE-404

CWE-787

CWE-476

Related Identifiers

BDU:2026-02285

CESA-2023_7077

CVE-2022-50406

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

RHSA-2025:21051

RHSA-2025:21091

RHSA-2025:21128

RHSA-2025:21136

RHSA-2025:22998

RHSA-2025:23463

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Centos

Debian

Linux Kernel

Red Hat

Suse

References · 964

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50406.json · Exploit
• https://git.kernel.org/stable/c/7308591d9c7787aec58f6a01a7823f14e90db7a2 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/82c66c46f73b88be74c869e2cbfef45281adf3c6 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50406 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50406 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50406 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50406 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02285 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50406 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50406 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/3d5f3ba1ac28059bdf7000cae2403e4e984308d2 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50406 · Security Note