CVE-2022-50363
A critical bug in the Linux kernel could let an attacker crash the system by calling a memory allocation function from an invalid context. The flaw was fixed by ensuring the allocation uses the correct memory flags. Updating to a patched kernel version resolves the issue.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel 6.1 and earlier versions, including the generic linux_kernel product.
Real-world impact
An attacker could trigger a crash that causes a denial‑of‑service, forcing the system to reboot or become unusable until the kernel is updated.
Why this severity
The CVSS score of 9.8 reflects the high impact on confidentiality, integrity, and availability, and the fact that the vulnerability can be exploited remotely without authentication or user interaction.
What to do about it
- 01Update the Linux kernel to a patched version that includes the fix (e.g., 6.1 or newer).
- 02Reboot the system to load the new kernel.
NVD-referenced vendor advisory
Timeline
- Sep 17, 2025 · Sep 17, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 1d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.