PT-2025-41060 · Linux+2 · Linux Kernel+2

Published 2023-05-09 · Updated 2025-10-07 · CVE-2022-50555

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the tipc topsrv accept function that can lead to a null pointer dereference. This issue was discovered by syzbot during testing. The root cause is that the srv->listener pointer might be set to null by tipc topsrv stop() while still being used in tipc topsrv accept(). The fix involves adding a check for srv->listener under srv->idr lock within tipc topsrv accept() to prevent the dereference. Additionally, the sock release() function is moved to after tipc topsrv work stop() to ensure the listener socket is not released prematurely. The fix also includes a check for srv in tipc topsrv listener data ready().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CESA-2023_7077

CVE-2022-50555

RHSA-2023:2458

RHSA-2023:7077

RHSA-2023_2458

RHSA-2023_7077

Affected Products

Centos

Linux Kernel

Red Hat

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50555.json · Exploit
• https://git.kernel.org/stable/c/ce69bdac2310152bb70845024d5d704c52aabfc3 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50555 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50555 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50555 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50555 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50555 · Vendor Advisory
• https://git.kernel.org/stable/c/32a3d4660b34ce49ac0162338ebe362098e2f5df · Patch
• https://cve.org/CVERecord?id=CVE-2022-50555 · Security Note
• https://git.kernel.org/stable/c/24b129aed8730e48f47d852d58d76825ab6f407c · Patch
• https://git.kernel.org/stable/c/82cb4e4612c633a9ce320e1773114875604a3cce · Patch
• https://git.kernel.org/stable/c/7a939503fc32bff4ed60800b73ff7fbb4aea2142 · Patch
• https://git.kernel.org/stable/c/cedb41664e27b2cae7e21487f1bee22dcd84037d · Patch
• https://ubuntu.com/security/CVE-2022-50555 · Vendor Advisory
• https://git.kernel.org/linus/82cb4e4612c633a9ce320e1773114875604a3cce · Note