PT-2025-41026 · Linux+1 · Linux Kernel+1

Published 2022-11-29 · Updated 2025-12-04 · CVE-2022-50521

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the mxm wmi call mxds|mx function within the x86 platform component of the Linux kernel. The ACPI buffer memory returned by the wmi evaluate method() function is not freed after the function call, leading to a memory leak. The issue is addressed by passing NULL to wmi evaluate method() as the method results in the ACPI buffer not being used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-12796

CVE-2022-50521

OESA-2025-2468

SUSE-SU-2025:4111-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

Affected Products

Linux Kernel

Suse

References · 470

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50521.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-38700 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50290 · Security Note
• https://git.kernel.org/stable/c/727cc0147f5066e359aca65cc6cc5e6d64cc15d8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53229 · Security Note
• https://git.kernel.org/stable/c/379e7794c5e7485193d25d73614fbbd1e1387f6f · Patch
• https://ubuntu.com/security/CVE-2022-50521 · Vendor Advisory
• https://git.kernel.org/stable/c/3cf81501356c9e898ad94b2369ffc805f83f7d7b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50521 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53480 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53220 · Security Note
• https://bdu.fstec.ru/vul/2025-12796 · Security Note
• https://osv.dev/vulnerability/OESA-2025-2468 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50521 · Vendor Advisory