PT-2025-41041 · Linux+3 · Linux Kernel+3

Published 2022-05-10 · Updated 2025-11-24 · CVE-2022-50536

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0 #1

Description The Linux kernel contains a flaw in the bpf, sockmap subsystem related to repeated calls to sock put() when a message has more data. Specifically, in the tcp bpf send verdict() redirection, the eval variable is not reset to SK NONE each time more data is present, leading to multiple calls to sock put(). This can result in a use-after-free condition, potentially causing a system crash. The issue occurs during IPv4 socket release when in state 1. The vulnerable code path involves the tcp bpf send verdict() function and related functions like tcp bpf sendmsg redir() and tcp bpf sendmsg().

Recommendations Update to Linux kernel version 6.0.0 #1 or later.

Exploit

Fix

Double Free

Use After Free

Weakness Enumeration

CWE-415

CWE-416

Related Identifiers

BDU:2026-04063

CESA-2022_1988

CVE-2022-50536

RHSA-2022:1988

RHSA-2022:8267

RHSA-2022_1988

RHSA-2022_8267

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2025:4189-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 308

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50536.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50536 · Vendor Advisory
• https://git.kernel.org/stable/c/28e4a763cd4a2b1a78852216ef4bd7df3a05cec6 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50536 · Vendor Advisory
• https://git.kernel.org/stable/c/113236e8f49f262f318c00ebb14b15f4834e87c1 · Patch
• https://git.kernel.org/stable/c/7508b9f4daac4ec7dfe0b6fb2d688b1c1c105e10 · Patch
• https://ubuntu.com/security/CVE-2022-50536 · Vendor Advisory
• https://git.kernel.org/stable/c/8786bde11a4f31b63b3036731df0b47337a7a245 · Patch
• https://git.kernel.org/stable/c/578a7628b838a3ac8ad61deaab5a816ff032ac13 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50536 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4189-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04063 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50536 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50536 · Security Note
• https://git.kernel.org/stable/c/7a9841ca025275b5b0edfb0b618934abb6ceec15 · Patch