PT-2025-49708 · Linux+2 · Linux Kernel+2

Published 2025-12-09 · Updated 2026-02-24 · CVE-2022-50677

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Linux kernel related to the Intelligent Platform Management Interface (IPMI). Specifically, the problem resides in the ipmi destroy user() function where the intf pointer is freed by the intf free() function and subsequently dereferenced, leading to a potential crash or other undefined behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50677

RHSA-2023:4517

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2026:0263-1

SUSE-SU-2026:0316-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Centos

Linux Kernel

Red Hat

References · 1108

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50677.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-50677 · Security Note
• https://ubuntu.com/security/CVE-2022-50677 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50677 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50677 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50677 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50677 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50677 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0316-1 · Vendor Advisory
• https://suse.com/support/update/announcement/2026/suse-su-20260316-1 · Note
• https://suse.com/security/cve/CVE-2023-53862 · Note