PT-2025-40152 · Linux+5 · Linux Kernel+5

Published 2022-08-31 · Updated 2026-04-20 · CVE-2022-50467

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s SCSI subsystem, specifically within the lpfc driver. An error case during exit from the lpfc cmpl ct cmd gft id() function can lead to a call to lpfc nlp put() with a null pointer to a nodelist structure. This can cause a null pointer dereference. The issue occurs in an abnormal exit path for GFT ID. The fix involves initializing the nodelist pointer upon entry to the lpfc cmpl ct cmd gft id() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-74655

BDU:2026-02342

CESA-2023_2951

CVE-2022-50467

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

RHSA-2024:4447

SUSE-SU-2025:03613-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Centos

Debian

Linux Kernel

Red Hat

Suse

Lpfc

References · 882

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50467.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://git.kernel.org/stable/c/82dc1fe4324e2c897f2ed1c66f4fcff03094ac3a · Patch
• https://git.kernel.org/stable/c/04e7cd8c85636a329d1a6e5a269a7c8b6f71c41c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50467 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50467 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50467 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50467 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50467 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50467 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02342 · Security Note
• https://osv.dev/vulnerability/AZL-74655 · Vendor Advisory