PT-2025-53149 · Linux+1 · Linux Kernel+1

Published 2025-12-24 · Updated 2025-12-25 · CVE-2022-50783

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s Multipath TCP (MPTCP) implementation. Previously, the destructor used for TCP request sockets was only from IPv4, even when the subflow was IPv6. This could lead to memory leaks when using advanced IPv6 features, specifically when request sockets contain certain IPv6 options. Proper use of the correct destructor is essential to avoid these memory leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50783

RHSA-2023:2458

Affected Products

Linux Kernel

Red Hat

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50783.json · Exploit
• https://ubuntu.com/security/CVE-2022-50783 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50783 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50783 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50783 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50783 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50783 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50783 · Vendor Advisory
• https://git.kernel.org/stable/c/1922ea6b0ae2ea0c9a09be0eafafe1cd1069d259 · Note
• https://git.kernel.org/stable/c/bd5dc96fea4edd16d2e22f41b4dd50a4cfbeb919 · Note
• https://git.kernel.org/stable/c/6eb02c596ec02e5897ae377e065cb7df55337a96 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2025122402-CVE-2022-50783-3109@gregkh/T · Note
• https://git.kernel.org/stable/c/d3295fee3c756ece33ac0d935e172e68c0a4161b · Note
• https://git.kernel.org/stable/c/092953f3c4cd65f88b27b87a922f6c725f34ee04 · Note