PT-2025-53955 · Linux · Linux Kernel

Published 2025-12-30 · Updated 2025-12-31 · CVE-2022-50837

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's networking subsystem related to DSA (Distributed Switch Architecture) and 802.1Q tagging. Specifically, if the dsa tag 8021q setup() function fails, such as when a device cannot install a VLAN, the associated context for the switch will leak. This occurs because the context is not properly freed during the error path of the dsa tag 8021q register() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50837

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50837.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50837 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50837 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50837 · Security Note
• https://ubuntu.com/security/CVE-2022-50837 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50837 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50837 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50837 · Vendor Advisory
• https://git.kernel.org/linus/e095493091e850d5292ad01d8fbf5cde1d89ac53 · Note
• https://git.kernel.org/stable/c/14ed46a13aba42a6ddd85de6f6274090df3586a5 · Note
• https://git.kernel.org/stable/c/e095493091e850d5292ad01d8fbf5cde1d89ac53 · Note
• https://twitter.com/CVEnew/status/2006332271792734714 · Twitter Post
• https://git.kernel.org/stable/c/09f30f394e832ed09859b6a80fdd20668a9104ff · Note
• https://git.kernel.org/stable/c/39691d51af99f80efb9e365f94b8e0c791fa1a2f · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note