PT-2025-40130 · Linux+1 · Linux Kernel+1

Published 2025-10-01 · Updated 2026-03-14 · CVE-2022-50445

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.0.0-rc6+ through 6.0.0-rc6+

Description The Linux kernel contains a flaw related to the handling of transport-mode packets within the xfrm framework. Specifically, the issue involves the potential for reinjection of these packets through a workqueue. This can lead to a soft lockup, as demonstrated by the watchdog bug observed during testing with the tcp6-multi-diffip11 stress test case of the LTP test suite. The issue is associated with the xfrm output one, xfrm output resume, xfrm output, xfrm6 output, xfrm6 output, ip6 xmit, inet6 csk xmit, tcp transmit skb, tcp write xmit, tcp push pending frames, tcp rcv established, tcp v6 do rcv, tcp v6 rcv, ip6 protocol deliver rcu, ip6 input finish, ip6 input, ip6 rcv finish, xfrm trans reinject functions. Analysis of softirq statistics reveals high activity in tasklet, net rx, timer, block, and sched softirqs.

Recommendations Versions prior to 6.0.0-rc6+ should be used.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

BDU:2026-05860

CVE-2022-50445

RHSA-2023:2458

Affected Products

Debian

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50445.json · Exploit
• https://git.kernel.org/stable/c/f520075da484306bbb8425afd2c42404ba74816f · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50445 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50445 · Vendor Advisory
• https://git.kernel.org/stable/c/130d9e5017ade1b81d16783563edb38c12a2eab7 · Patch
• https://bdu.fstec.ru/vul/2026-05860 · Security Note
• https://ubuntu.com/security/CVE-2022-50445 · Vendor Advisory
• https://git.kernel.org/stable/c/4f4920669d21e1060b7243e5118dc3b71ced1276 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50445 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50445 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50445 · Security Note
• https://git.kernel.org/stable/c/7d98b26684cb2390729525b341ea099f0badbe18 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50445 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50445 · Vendor Advisory
• https://git.kernel.org/linus/4f4920669d21e1060b7243e5118dc3b71ced1276 · Note