7.8

CVE-2022-50252: linux Use After Free

CVSS: 7.8v3.1HighModified
AliasesSUSE-SU-2025:3926-1UBUNTU-CVE-2022-50252DEBIAN-CVE-2022-50252
Published 15-09-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2022-50252 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.5% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 24 · Related 24
SUSE-SU-2025:03613-1SUSE-SU-2025:03614-1SUSE-SU-2025:03615-1SUSE-SU-2025:03626-1SUSE-SU-2025:03628-1SUSE-SU-2025:3716-1

Timeline

  1. 15-09-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-free condition under memory pressure. If the kzalloc() fails, q_vector will be freed but left in the original adapter->q_vector[v_idx] array position.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

0.00 pp

From 0.16% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu120 products
  • linuxAll versions (No fix recorded) | < 4.15.0-208.220 | < 5.4.0-144.161 | < 5.15.0-69.76
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 4.15.0-1153.166 | < 5.4.0-1097.105 | < 5.15.0-1033.37
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 72ddef0506da852dc82f078f37ced8ef4d74a2bf, < 64ca1969599857143e91aeec4440640656100803 | ≥ 72ddef0506da852dc82f078f37ced8ef4d74a2bf, < 0200f0fbb11e359cc35af72ab10b2ec224e6f633 | ≥ 72ddef0506da852dc82f078f37ced8ef4d74a2bf, < 68e8adbcaf7a8743e473343b38b9dad66e2ac6f3 | ≥ 72ddef0506da852dc82f078f37ced8ef4d74a2bf, < f96bd8adc8adde25390965a8c1ee81b73cb62075 | ≥ 72ddef0506da852dc82f078f37ced8ef4d74a2bf, < 3cb18dea11196fb4a06f78294cec5e61985e1aff | ≥ 72ddef0506da852dc82f078f37ced8ef4d74a2bf, < 314f7092b27749bdde44c14095b5533afa2a3bc8 | ≥ 72ddef0506da852dc82f078f37ced8ef4d74a2bf, < 6e399577bd397a517df4b938601108c63769ce0a | ≥ 72ddef0506da852dc82f078f37ced8ef4d74a2bf, < 56483aecf6b22eb7dff6315b3a174688c6ad494c | ≥ 72ddef0506da852dc82f078f37ced8ef4d74a2bf, < 0668716506ca66f90d395f36ccdaebc3e0e84801 | 5be042b1917ddf444c20f4e12856535307b37c01 | a0e26ed623a1e1460c1a191fbc0f37bddab7851a | f4b7f93cd34a6153d454a837708fd4203990d1ae | ≥ 3.18.23, < 3.19 | ≥ 4.1.9, < 4.2 | ≥ 4.2.2, < 4.3 | 4.3
  • linux_kernel< 4.9.337 | ≥ 4.10, < 4.14.303 | ≥ 4.15, < 4.19.270 | ≥ 4.20, < 5.4.229 | ≥ 5.5, < 5.10.163 | ≥ 5.11, < 5.15.86 | ≥ 5.16, < 6.0.16 | ≥ 6.1, < 6.1.2
Debian1 product
  • linux< 6.1.4-1
Suse1 product
  • kgraft-patch-SLE12-SP5_Update_72&distro=SUSE Linux Enterprise Live Patching 12 SP5< 3-4.1

4 vendors · 124 products

References

16 links
Show all 16 references