PT-2025-52936 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2026-01-28 · CVE-2022-50706

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where a zero-sized raw send message request for PF IEEE802154 sockets could trigger a warning in the dev queue xmit() function. This occurred because the system attempted to call dev queue xmit() with a socket buffer (skb) length of zero. The fix prevents calling dev queue xmit() if the packet length is zero. The issue was identified by syzbot during testing. The code example provided demonstrates the vulnerability by creating a PF IEEE802154 socket and sending a message with an empty iovec. The fix may be related to a previous commit that restricted packet lengths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50706

SUSE-SU-2026:0316-1

Affected Products

Linux Kernel

References · 329

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50706.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2026:0316-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50706 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50706 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50706 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50706 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50706 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50706 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50706 · Vendor Advisory
• https://bugzilla.suse.com/1256142 · Note
• https://suse.com/security/cve/CVE-2022-50747 · Note
• https://bugzilla.suse.com/1255902 · Note
• https://bugzilla.suse.com/1255280 · Note
• https://suse.com/security/cve/CVE-2023-54170 · Note
• https://suse.com/security/cve/CVE-2023-53765 · Note