CVE-2022-50677

High

Description

In the Linux kernel, the following vulnerability has been resolved: ipmi: fix use after free in _ipmi_destroy_user() The intf_free() function frees the "intf" pointer so we cannot dereference it again on the next line.

SeverityHigh
CVSS7.0
Exploit probability—
ProductLinux
PublishedDec 9, 2025
First seenDec 9, 2025

How to fix

Update
  • Linux Linux35ad87bfe330f7ef6a19f772223c63296d643172, d23006f2a56e11a3103de0ca8b843bf7fd7d76fc, f29d127b372e1b7662397d92341d9f7de198ff99, bfce073089cb81482521c65061835aaa6d1a6cc0, f7fde441198a9ecb130c3ccec91ee2131d6998ee, 1fc9b20a7688000fcf4d7fbaa58e415a3cdda961, a92ce570c81dc0feaeb12a429b4bc65686d17967, 4.19.270, 5.4.229 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxf9d405a4bd6090ffbf3bba5e2da6b44c0e013cb3 ≤ v < 35ad87bfe330f7ef6a19f772223c63296d643172, b642ced2cad496c32ae1f62b85fc395391190820 ≤ v < d23006f2a56e11a3103de0ca8b843bf7fd7d76fc, cbb79863fc3175ed5ac506465948b02a893a8235 ≤ v < f29d127b372e1b7662397d92341d9f7de198ff99, cbb79863fc3175ed5ac506465948b02a893a8235 ≤ v < bfce073089cb81482521c65061835aaa6d1a6cc0, cbb79863fc3175ed5ac506465948b02a893a8235 ≤ v < f7fde441198a9ecb130c3ccec91ee2131d6998ee, cbb79863fc3175ed5ac506465948b02a893a8235 ≤ v < 1fc9b20a7688000fcf4d7fbaa58e415a3cdda961, cbb79863fc3175ed5ac506465948b02a893a8235 ≤ v < a92ce570c81dc0feaeb12a429b4bc65686d17967, 4.19.92 ≤ v < 4.19.270, 5.4.7 ≤ v < 5.4.229, 5.535ad87bfe330f7ef6a19f772223c63296d643172, d23006f2a56e11a3103de0ca8b843bf7fd7d76fc, f29d127b372e1b7662397d92341d9f7de198ff99, bfce073089cb81482521c65061835aaa6d1a6cc0, f7fde441198a9ecb130c3ccec91ee2131d6998ee, 1fc9b20a7688000fcf4d7fbaa58e415a3cdda961, a92ce570c81dc0feaeb12a429b4bc65686d17967, 4.19.270, 5.4.229

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-50677 · Linux · Dark Radar