PT-2025-52932 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2026-02-24 · CVE-2022-50702

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a potential memory leak within the vdpa sim module, specifically in the vdpasim net init() and vdpasim blk init() functions. The issue arises when a device registration fails during module probing, but the reference count of the kobject is not decremented to zero, leading to a leak of allocated memory for the device name. The fix involves calling put device() to ensure proper freeing of the allocated name in the kobject cleanup callback.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50702

RHSA-2023:2458

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 972

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50702.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50702 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50702 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50702 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50702 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50702 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50702 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50702 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-53862 · Note
• https://bugzilla.suse.com/1255970 · Note
• https://suse.com/security/cve/CVE-2023-54025 · Note