PT-2025-53029 · Linux · Linux Kernel

Published 2022-11-18 · Updated 2025-12-26 · CVE-2022-50725

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a use-after-free issue within the vidtv bridge dvb init() function. The issue arises from incorrect error handling, where release functions are called multiple times, leading to a use-after-free condition. Specifically, the vidtv bridge dmx() and vidtv bridge dmx( dev) init() functions clean up resources on failure, but the fail dmx( dev) section then calls release functions again, causing the use-after-free. Additionally, potential out-of-bounds access could occur in the fail fe, fail tuner probe, and fail demod probe sections due to an incorrect loop condition. The KASAN (Kernel Address Sanitizer) tool reported this issue with the following error message: 'BUG: KASAN: use-after-free in dvb dmxdev release+0x4d5/0x5d0 [dvb core]'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-03687

CVE-2022-50725

Affected Products

Linux Kernel

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50725.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50725 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50725 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50725 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50725 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03687 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50725 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50725 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50725 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.163 · Note
• https://lore.kernel.org/linux-cve-announce/2025122418-CVE-2022-50725-967f@gregkh · Note
• https://git.kernel.org/stable/c/8a204a0b4a0d105229735222c515759ea2b126c1 · Note
• https://twitter.com/CVEnew/status/2004457813301776401 · Twitter Post
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.2 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note