PT-2025-53146 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2026-02-12 · CVE-2022-50780

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a use-after-free issue within the nfqnl nf hook drop() function. This occurs when the ops init() interface fails during net initialization, leading to an invalid pointer in net->gen. Subsequently, invoking nfqnl nf hook drop() results in accessing this invalid memory location. The issue arises from data being released while the pointer in net->gen remains invalid, and is triggered when ops->init() fails after memory allocation. The call trace indicates the issue occurs during the setup net() process, potentially during namespace creation via the unshare system call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50780

RHSA-2024:2394

SUSE-SU-2026:0473-1

Affected Products

Linux Kernel

References · 317

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50780.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50780 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50780 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0473-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50780 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50780 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50780 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50780 · Vendor Advisory
• https://suse.com/security/cve/CVE-2022-49943 · Note
• https://suse.com/security/cve/CVE-2022-50709 · Note
• https://suse.com/security/cve/CVE-2025-71119 · Note
• https://bugzilla.suse.com/1239346 · Note
• https://bugzilla.suse.com/1255839 · Note
• https://bugzilla.suse.com/1248341 · Note