PT-2025-40117 · Linux+2 · Linux Kernel+2

Published 2022-09-24 · Updated 2025-11-28 · CVE-2022-50432

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc3-00363-g7726d4c3e60b

Description The Linux kernel contained a use-after-free flaw within the kernfs subsystem, specifically in the kernfs remove function. This issue stemmed from concurrent calls to kernfs remove by name ns() for the same file, triggered by a race condition during kernfs root node freeing within kernfs drain(). The Syzkaller fuzzer identified this condition, which resulted in a KASAN detected use-after-free.

Recommendations Update to a version newer than 6.0.0-rc3-00363-g7726d4c3e60b.

Exploit

Fix

Use After Free

Race Condition

Weakness Enumeration

CWE-416

CWE-362

Related Identifiers

BDU:2026-01285

CVE-2022-50432

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

SUSE-SU-2025:4135-1

SUSE-SU-2025:4171-1

SUSE-SU-2025:4172-1

SUSE-SU-2025:4188-1

SUSE-SU-2025:4203-1

SUSE-SU-2025:4213-1

SUSE-SU-2025:4285-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1091

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50432.json · Exploit
• https://git.kernel.org/stable/c/4dfd6a477a1525773469feaf3c514b2c0fef76b5 · Patch
• https://git.kernel.org/stable/c/02eb35131050735332658029082f61515b7dfe38 · Patch
• https://git.kernel.org/stable/c/c78b0dc6fb7fb389d674e491fd376388cdfb1d53 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50432 · Vendor Advisory
• https://git.kernel.org/stable/c/028cf780743eea79abffa7206b9dcfc080ad3546 · Patch
• https://git.kernel.org/stable/c/94d2643df1e70a4c310ebb5e2c493eec33df1a06 · Patch
• https://git.kernel.org/stable/c/af1b57cc39beca203559576b3046094fc9e5eb32 · Patch
• https://osv.dev/vulnerability/CVE-2022-50432 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50432 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4abc99652812a2ddf932f137515d5c5a04723538 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50432 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01285 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory