PT-2025-49612 · Linux+1 · Linux Kernel+1

Published 2025-12-08 · Updated 2025-12-22 · CVE-2022-50632

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to hotplug callback handling within the marvell cn10k driver. Specifically, the tad pmu init() function does not remove a callback added by cpuhp setup state multi() when platform driver registration fails. This results in a hotplug callback leak. The issue is similar to a previous fix for arm ccn init(). The vulnerable function is tad pmu init().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50632

RHSA-2023:6583

Affected Products

Linux Kernel

Marvell Cn10K

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50632.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50632 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50632 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50632 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50632 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50632 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50632 · Security Note
• https://ubuntu.com/security/CVE-2022-50632 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/973ae93d80d9d262f695eb485a1902b74c4b9098 · Note
• https://git.kernel.org/stable/c/367404bfd1aa87b2a50059cd8edc6c12c367cd15 · Note
• https://git.kernel.org/stable/c/973ae93d80d9d262f695eb485a1902b74c4b9098 · Note
• https://git.kernel.org/stable/c/7772f4de934123ccd7c7cdc1dc4e46fdd5d767fb · Note
• https://twitter.com/CVEnew/status/2003233998504698234 · Twitter Post
• https://lore.kernel.org/linux-cve-announce/2025120934-CVE-2022-50632-97fb@gregkh/T · Note