PT-2025-53973 · Linux · Linux Kernel

Published 2025-12-30 · Updated 2025-12-30 · CVE-2022-50855

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to Berkeley Packet Filter (BPF) programs. Specifically, the issue involves a failure to properly decrement the reference count of a Loadable Security Module (LSM) program after a failed attachment attempt to a control group (cgroup). This results in the LSM program remaining active beyond its intended lifecycle, leading to a resource leak. The vulnerability was addressed by ensuring the reference count is decremented even when the attachment validation fails.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50855

RHSA-2023:2458

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50855.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50855 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50855 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50855 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50855 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50855 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50855 · Security Note
• https://ubuntu.com/security/CVE-2022-50855 · Vendor Advisory
• https://git.kernel.org/linus/e89f3edffb860a0f54a9ed16deadb7a4a1fa3862 · Note
• https://git.kernel.org/stable/c/82b39df5ddb298daaf6dc504032ff7eb027fa106 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2025123046-CVE-2022-50855-7845@gregkh/T · Note
• https://twitter.com/CVEnew/status/2006132940678304110 · Twitter Post
• https://git.kernel.org/stable/c/e89f3edffb860a0f54a9ed16deadb7a4a1fa3862 · Note
• https://git.kernel.org/stable/c/6a1504dd36cd9a0a69250d61da8bdb17b29f1fe8 · Note