PT-2025-38428 · Linux+2 · Linux Kernel+2

Published 2022-11-08 · Updated 2025-10-23 · CVE-2022-50411

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in acpi ps parse aml() following a failing invocation of acpi ds call control method(). The issue occurs because a walk state pushed to the thread is freed on errors but not popped from the thread beforehand, leading acpi ds get current walk state() to return an incorrect walk state.

Recommendations Call acpi ds pop walk state() within acpi ds call control method() before returning an error.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-02185

CVE-2022-50411

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 989

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50411.json · Exploit
• https://git.kernel.org/stable/c/f520d181477ec29a496c0b3bbfbdb7e2606c2713 · Patch
• https://git.kernel.org/stable/c/2deb42c4f9776e59bee247c14af9c5e8c05ca9a6 · Patch
• https://git.kernel.org/stable/c/5777432ebaaf797e24f059979b42df3139967163 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50411 · Vendor Advisory
• https://git.kernel.org/stable/c/9ef353c92f9d04c88de3af1a46859c1fb76db0f8 · Patch
• https://bdu.fstec.ru/vul/2026-02185 · Security Note
• https://git.kernel.org/stable/c/799881db3e03b5e98fe6a900d9d7de8c7d61e7ee · Patch
• https://git.kernel.org/stable/c/b0b83d3f3ffa96e8395c56b83d6197e184902a34 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50411 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/38e251d356a01b61a86cb35213cafd7e8fe7090c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50411 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory