PT-2025-53112 · Linux+1 · Linux Kernel+1

Published 2025-12-24 · Updated 2026-04-20 · CVE-2022-50746

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where the extent length for uncompressed pclusters is not validated, potentially leading to a use-after-free condition. This was identified through syzkaller fuzzing, specifically reported at https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2. The issue involves a logical length exceeding its physical length. The patch addresses this by adding a check for extent length validity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50746

OESA-2026-1075

OESA-2026-1076

Affected Products

Debian

Linux Kernel

References · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50746.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-39970 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1075 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50746 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53861 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50746 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50746 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68734 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50635 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53846 · Security Note
• https://ubuntu.com/security/CVE-2022-50746 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68745 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39949 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1076 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68171 · Security Note