PT-2025-40673 · Linux+1 · Linux Kernel+1

Published 2024-11-12 · Updated 2025-10-04 · CVE-2022-50486

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where the return type of the netcp ndo start xmit() function does not match the expected return type in the struct net device ops. Specifically, ndo start xmit() expects a return type of netdev tx t, but the function currently returns int. This discrepancy can lead to failures when using clang's kernel control flow integrity (kCFI) feature, potentially resulting in a kernel panic or thread termination. The issue manifests as an error during compilation when using clang with kCFI enabled, indicating incompatible function pointer types. The netcp ndo start xmit() function is involved in transmitting network packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

CVE-2022-50486

RHSA-2024:9315

RHSA-2024_9315

Affected Products

Linux Kernel

Red Hat

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50486.json · Exploit
• https://git.kernel.org/stable/c/a447479ea2cf35603b5739ea947885024b901222 · Patch
• https://git.kernel.org/stable/c/dbe1a6b930ae9647e8ce0b684c903ac67d4398eb · Patch
• https://git.kernel.org/stable/c/17bb9bdf701f3e811a9f4820b08b9538ade2641c · Patch
• https://git.kernel.org/stable/c/765636e58ba505cfe4927eda7ee83791b1c6402a · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50486 · Vendor Advisory
• https://git.kernel.org/stable/c/63fe6ff674a96cfcfc0fa8df1051a27aa31c70b4 · Patch
• https://git.kernel.org/stable/c/1e4953b826e12b31995564a459dbd4e9e4604a35 · Patch
• https://osv.dev/vulnerability/CVE-2022-50486 · Vendor Advisory
• https://git.kernel.org/stable/c/d837d74eae077cc3ef9e191ba8535b5f602d4673 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50486 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50486 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50486 · Vendor Advisory
• https://git.kernel.org/stable/c/5b0b6553bf4ad3a435a57e02c68d6075f384e1be · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50486 · Security Note