PT-2025-49619 · Linux+1 · Linux Kernel+1

Published 2025-12-09 · Updated 2025-12-22 · CVE-2022-50639

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1-rc1

Description A memory leak exists in the Linux kernel related to worker creation within the io-wq subsystem. Specifically, if CPU mask allocation for a node fails, the memory allocated for the io wqe struct is not freed during error handling because it hasn't been added to the wqes array. This issue was identified through fuzzing with Syzkaller. The vulnerable code path involves the io wq create() function and can occur during the io uring setup() system call.

Recommendations Update to a version of the Linux kernel newer than 6.1-rc1.

Exploit

Related Identifiers

CVE-2022-50639

RHSA-2023:6583

Affected Products

Linux Kernel

Red Hat

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50639.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50639 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50639 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50639 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50639 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50639 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50639 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50639 · Security Note
• https://git.kernel.org/stable/c/ed981911a7c90a604f4a2bee908ab07e3b786aca · Note
• https://git.kernel.org/stable/c/b6e2c54be37d5eb4f6666e6aa59cd0581c7ffc3c · Note
• https://git.kernel.org/linus/996d3efeb091c503afd3ee6b5e20eabf446fd955 · Note
• https://twitter.com/CVEnew/status/2003233972227309678 · Twitter Post
• https://lore.kernel.org/linux-cve-announce/2025120935-CVE-2022-50639-789f@gregkh/T · Note
• https://git.kernel.org/stable/c/996d3efeb091c503afd3ee6b5e20eabf446fd955 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note