PT-2025-53991 · Linux · Linux Kernel

Published 2025-12-30 · Updated 2026-01-28 · CVE-2022-50873

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the vdpa/vp vdpa component. Specifically, the vp vdpa remove() function incorrectly uses a pointer as an argument for the kfree() function, potentially leading to a kernel crash. This issue occurs due to the code attempting to free the wrong memory address, resulting in an 'Unable to handle kernel paging request' error. The call trace indicates involvement of functions like rb next, ext4 readdir, and se sys getdents64.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50873

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

Affected Products

Linux Kernel

References · 849

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50873.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50873 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50873 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50873 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50873 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50873 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50873 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50873 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note
• https://bugzilla.suse.com/1255007 · Note
• https://suse.com/security/cve/CVE-2022-50718 · Note
• https://bugzilla.suse.com/1256199 · Note