PT-2025-53949 · Linux · Linux Kernel

Published 2022-01-01 · Updated 2025-12-31 · CVE-2022-50831

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Linux kernel’s mac80211 component when parsing multi-BSSID elements. Specifically, element pointers could point into memory that was freed prematurely, leading to a use-after-free condition when those pointers are accessed. The issue was addressed by allocating a scratch buffer as part of the returned structure, eliminating lifetime issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-50831

ECHO-0733-CF36-0C43

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-50831 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50831 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50831 · Vendor Advisory
• https://git.kernel.org/stable/c/de124365a7d2deed22cf706583930f28d537ff0f · Note
• https://twitter.com/CVEnew/status/2006332278025400370 · Twitter Post