PT-2025-40722 · Eulerosv2+3 · Eulerosv2+3

Published 2023-11-07 · Updated 2026-02-13 · CVE-2022-50488

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.0-60.18.0.50.h602

Description The Linux kernel contains a use-after-free issue within the block, bfq (Best Effort Queue) subsystem. Specifically, the issue relates to the bfqq->bic pointer. A scenario involving process migration between cgroups can lead to a situation where the bfqq and bic structures point to the same memory location, and the bic structure may be freed while still being referenced by the bfqq, resulting in a use-after-free condition. This can occur when a process moves to a new cgroup and issues new I/O requests before the previous I/O requests are completed.

Recommendations Update to Linux kernel version 5.10.0-60.18.0.50.h602 or a later version to address this issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2022-50488

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2025:4111-1

SUSE-SU-2025:4135-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4188-1

SUSE-SU-2025:4320-1

SUSE-SU-2026:0475-1

SUSE-SU-2026:0495-1

Affected Products

Eulerosv2

Linux Kernel

Red Hat

Suse

References · 519

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50488.json · Exploit
• https://git.kernel.org/stable/c/b22fd72bfebda3956efc4431b60ddfc0a51e03e0 · Patch
• https://git.kernel.org/stable/c/5533742c7cb1bc9b1f0bf401cc397d44a3a9e07a · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50488 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4135-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50488 · Security Note
• https://ubuntu.com/security/CVE-2022-50488 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50488 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4320-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50488 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory
• https://git.kernel.org/stable/c/761564d93c8265f65543acf0a576b32d66bfa26a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50488 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4139-1 · Vendor Advisory