PT-2025-43067 · Git+3 · Kernel+82

Published 2025-10-22 · Updated 2025-10-22 · CVE-2022-50557

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the pinctrl subsystem, specifically in the thunderbay build functions() function. A memory leak can occur in thunderbay funcs if thunderbay add functions() fails. This happens because the memory allocated for thunderbay funcs is not freed when the function encounters an error. The fix involves adding a kfree() call within thunderbay add functions() to release the allocated memory in case of failure, and moving the kfree(funcs) operation from thunderbay add functions() to thunderbay build functions().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50557

Affected Products

Kernel

Linux

Linux-Allwinner-5.19

Linux-Aws-5.0

Linux-Aws-5.11

Linux-Aws-5.13

Linux-Aws-5.19

Linux-Aws-5.3

Linux-Aws-5.8

Linux-Aws-6.2

Linux-Aws-6.5

Linux-Azure

Linux-Azure-5.11

Linux-Azure-5.13

Linux-Azure-5.19

Linux-Azure-5.3

Linux-Azure-5.8

Linux-Azure-6.11

Linux-Azure-6.2

Linux-Azure-6.5

Linux-Azure-Edge

Linux-Azure-Fde

Linux-Azure-Fde-5.19

Linux-Azure-Fde-6.2

Linux-Gcp

Linux-Gcp-5.11

Linux-Gcp-5.13

Linux-Gcp-5.19

Linux-Gcp-5.3

Linux-Gcp-5.8

Linux-Gcp-6.11

Linux-Gcp-6.2

Linux-Gcp-6.5

Linux-Gke

Linux-Gke-4.15

Linux-Gkeop-5.15

Linux-Gke-5.4

Linux-Gkeop

Linux-Hwe

Linux-Hwe-5.11

Linux-Hwe-5.13

Linux-Hwe-5.19

Linux-Hwe-5.8

Linux-Hwe-6.11

Linux-Hwe-6.2

Linux-Hwe-6.5

Linux-Hwe-Edge

Linux-Intel-5.13

Linux-Intel-Iot-Realtime

Linux-Lowlatency-Hwe-5.19

Linux-Lowlatency-Hwe-6.11

Linux-Lowlatency-Hwe-6.2

Linux-Lowlatency-Hwe-6.5

Linux-Nvidia-6.2

Linux-Nvidia-6.5

Linux-Oem

Linux-Oem-5.10

Linux-Oem-5.13

Linux-Oem-5.14

Linux-Oem-5.17

Linux-Oem-5.6

Linux-Oem-6.0

Linux-Oem-6.1

Linux-Oem-6.11

Linux-Oem-6.5

Linux-Oem-6.8

Linux-Oracle-5.0

Linux-Oracle-5.11

Linux-Oracle-5.13

Linux-Oracle-5.3

Linux-Oracle-5.8

Linux-Oracle-6.5

Linux-Raspi-Realtime

Linux-Raspi2

Linux-Realtime

Linux-Riscv

Linux-Riscv-5.11

Linux-Riscv-5.19

Linux-Riscv-5.8

Linux-Riscv-6.5

Linux-Starfive-5.19

Linux-Starfive-6.2

Linux-Starfive-6.5

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50557.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50557 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50557 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50557 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50557 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50557 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50557 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50557 · Security Note
• https://git.kernel.org/linus/83e1bcaf8cef26edaaf2a6098ef760f563683483 · Note
• https://git.kernel.org/stable/c/aae4846e8e49044cb51d0276bec2a3fc2d5cd8da · Note
• https://git.kernel.org/stable/c/83e1bcaf8cef26edaaf2a6098ef760f563683483 · Note
• https://git.kernel.org/stable/c/3650943bab29d03ef147290451237713ed1942cd · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note