CVE-2022-50650 — Improper Update of Reference Count in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 89.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix reference state management for synchronous callbacks
Currently, verifier verifies callback functions (sync and async) as if
they will be executed once, (i.e. it explores execution state as if the
function was being called once). The next insn to explore is set to
start of subprog and the exit from nested frame is handled using
curframe > 0 and prepare_func_exit. In case of async callback it uses a
customized variant o…
Affected Packages4 packages
▶CVEListV5linux/linux69c087ba6225b574afb6e505b72cb75242a3d844 — 4ed5155043c97ac8912bcf67331df87c833fb067+4
🔴Vulnerability Details
3OSV▶
CVE-2022-50650: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference state management for synchronous callbacks Currently, verifier↗2025-12-09
GHSA▶
GHSA-f9w8-ggmf-6h55: In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix reference state management for synchronous callbacks
Currently, verifie↗2025-12-09