PT-2025-40731 · Linux+1 · Linux Kernel+1

Published 2025-10-04 · Updated 2025-12-04 · CVE-2022-50497

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the binfmt misc module related to a shift-out-of-bounds condition in the check special flags function. This condition was identified by UBSAN (Undefined Behavior Sanitizer) reporting that a left shift operation could exceed the bounds of the 'int' data type. The issue occurs during the processing of Node flags, which are of type unsigned long, while the macros used for flag manipulation are defined with the 'int' type.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-50497

OESA-2025-2533

SUSE-SU-2025:4111-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

Affected Products

Linux Kernel

Suse

References · 474

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50497.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50497 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50314 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53456 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38449 · Security Note
• https://git.kernel.org/stable/c/ea6145370be8016755c43aca799815fc4b8c88b1 · Patch
• https://git.kernel.org/stable/c/a651bb5ff997b9f02662bcdef3d8b4e6f0d79656 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53322 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50497 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2533 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53431 · Security Note
• https://git.kernel.org/stable/c/0f1a48994b3e516d5c7fd5d12204fdba7a604771 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50430 · Security Note
• https://git.kernel.org/stable/c/a91123d4bda463469f68f0427adabf8108001f94 · Patch