PT-2025-41036 · Linux · Linux Kernel

Published 2022-10-14 · Updated 2025-11-14 · CVE-2022-50531

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An information leak was identified in the Linux kernel related to the tipc topsrv kern subscr function. Specifically, an 8-byte write was not used to initialize the sub.usr handle variable, leaving four bytes uninitialized when issuing setsockopt calls with the SOL TIPC option. This resulted in an information leak, as reported by KMSAN, when a packet was received. The issue occurs during the processing of socket options and can lead to the exposure of data through copyout operations. The vulnerability is related to the tipc topsrv kern subscr() function and affects the handling of subscriptions within the TIPC (Transparent Inter-Process Communication) framework.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Information Disclosure

Weakness Enumeration

CWE-401

CWE-200

Related Identifiers

BDU:2026-03828

CVE-2022-50531

OESA-2025-2659

RHSA-2023:2458

RHSA-2023:2951

Affected Products

Linux Kernel

References · 53

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50531.json · Exploit
• https://bdu.fstec.ru/vul/2026-03828 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50520 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50531 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39973 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53641 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50349 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50484 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53675 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53199 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50482 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50352 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50531 · Vendor Advisory
• https://git.kernel.org/stable/c/e558e148938442dd49628cd7ef61c360832bef31 · Patch