GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-50555 (GCVE-0-2022-50555)

Vulnerability from cvelistv5 – Published: 2025-10-07 15:21 – Updated: 2026-08-05 08:59
VLAI
Title
tipc: fix a null-ptr-deref in tipc_topsrv_accept
Summary
In the Linux kernel, the following vulnerability has been resolved: tipc: fix a null-ptr-deref in tipc_topsrv_accept syzbot found a crash in tipc_topsrv_accept: KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] Workqueue: tipc_rcv tipc_topsrv_accept RIP: 0010:kernel_accept+0x22d/0x350 net/socket.c:3487 Call Trace: <TASK> tipc_topsrv_accept+0x197/0x280 net/tipc/topsrv.c:460 process_one_work+0x991/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 It was caused by srv->listener that might be set to null by tipc_topsrv_stop() in net .exit whereas it's still used in tipc_topsrv_accept() worker. srv->listener is protected by srv->idr_lock in tipc_topsrv_stop(), so add a check for srv->listener under srv->idr_lock in tipc_topsrv_accept() to avoid the null-ptr-deref. To ensure the lsock is not released during the tipc_topsrv_accept(), move sock_release() after tipc_topsrv_work_stop() where it's waiting until the tipc_topsrv_accept worker to be done. Note that sk_callback_lock is used to protect sk->sk_user_data instead of srv->listener, and it should check srv in tipc_topsrv_listener_data_ready() instead. This also ensures that no more tipc_topsrv_accept worker will be started after tipc_conn_close() is called in tipc_topsrv_stop() where it sets sk->sk_user_data to null.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0ef897be12b8b4cf297b6016e79ec97ec90f2cf6 , < ce69bdac2310152bb70845024d5d704c52aabfc3 (git)
Affected: 0ef897be12b8b4cf297b6016e79ec97ec90f2cf6 , < 24b129aed8730e48f47d852d58d76825ab6f407c (git)
Affected: 0ef897be12b8b4cf297b6016e79ec97ec90f2cf6 , < 32a3d4660b34ce49ac0162338ebe362098e2f5df (git)
Affected: 0ef897be12b8b4cf297b6016e79ec97ec90f2cf6 , < 7a939503fc32bff4ed60800b73ff7fbb4aea2142 (git)
Affected: 0ef897be12b8b4cf297b6016e79ec97ec90f2cf6 , < cedb41664e27b2cae7e21487f1bee22dcd84037d (git)
Affected: 0ef897be12b8b4cf297b6016e79ec97ec90f2cf6 , < 82cb4e4612c633a9ce320e1773114875604a3cce (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.17
Unaffected: 0 , < 4.17 (semver)
Unaffected: 4.19.264 , ≤ 4.19.* (semver)
Unaffected: 5.4.223 , ≤ 5.4.* (semver)
Unaffected: 5.10.153 , ≤ 5.10.* (semver)
Unaffected: 5.15.77 , ≤ 5.15.* (semver)
Unaffected: 6.0.7 , ≤ 6.0.* (semver)
Unaffected: 6.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/tipc/topsrv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ce69bdac2310152bb70845024d5d704c52aabfc3",
              "status": "affected",
              "version": "0ef897be12b8b4cf297b6016e79ec97ec90f2cf6",
              "versionType": "git"
            },
            {
              "lessThan": "24b129aed8730e48f47d852d58d76825ab6f407c",
              "status": "affected",
              "version": "0ef897be12b8b4cf297b6016e79ec97ec90f2cf6",
              "versionType": "git"
            },
            {
              "lessThan": "32a3d4660b34ce49ac0162338ebe362098e2f5df",
              "status": "affected",
              "version": "0ef897be12b8b4cf297b6016e79ec97ec90f2cf6",
              "versionType": "git"
            },
            {
              "lessThan": "7a939503fc32bff4ed60800b73ff7fbb4aea2142",
              "status": "affected",
              "version": "0ef897be12b8b4cf297b6016e79ec97ec90f2cf6",
              "versionType": "git"
            },
            {
              "lessThan": "cedb41664e27b2cae7e21487f1bee22dcd84037d",
              "status": "affected",
              "version": "0ef897be12b8b4cf297b6016e79ec97ec90f2cf6",
              "versionType": "git"
            },
            {
              "lessThan": "82cb4e4612c633a9ce320e1773114875604a3cce",
              "status": "affected",
              "version": "0ef897be12b8b4cf297b6016e79ec97ec90f2cf6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/tipc/topsrv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.17"
            },
            {
              "lessThan": "4.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.264",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.223",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.153",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.77",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.264",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.223",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.153",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.77",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.7",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix a null-ptr-deref in tipc_topsrv_accept\n\nsyzbot found a crash in tipc_topsrv_accept:\n\n  KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\n  Workqueue: tipc_rcv tipc_topsrv_accept\n  RIP: 0010:kernel_accept+0x22d/0x350 net/socket.c:3487\n  Call Trace:\n   \u003cTASK\u003e\n   tipc_topsrv_accept+0x197/0x280 net/tipc/topsrv.c:460\n   process_one_work+0x991/0x1610 kernel/workqueue.c:2289\n   worker_thread+0x665/0x1080 kernel/workqueue.c:2436\n   kthread+0x2e4/0x3a0 kernel/kthread.c:376\n   ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306\n\nIt was caused by srv-\u003elistener that might be set to null by\ntipc_topsrv_stop() in net .exit whereas it\u0027s still used in\ntipc_topsrv_accept() worker.\n\nsrv-\u003elistener is protected by srv-\u003eidr_lock in tipc_topsrv_stop(), so add\na check for srv-\u003elistener under srv-\u003eidr_lock in tipc_topsrv_accept() to\navoid the null-ptr-deref. To ensure the lsock is not released during the\ntipc_topsrv_accept(), move sock_release() after tipc_topsrv_work_stop()\nwhere it\u0027s waiting until the tipc_topsrv_accept worker to be done.\n\nNote that sk_callback_lock is used to protect sk-\u003esk_user_data instead of\nsrv-\u003elistener, and it should check srv in tipc_topsrv_listener_data_ready()\ninstead. This also ensures that no more tipc_topsrv_accept worker will be\nstarted after tipc_conn_close() is called in tipc_topsrv_stop() where it\nsets sk-\u003esk_user_data to null."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The topology server is bound with TIPC_NODE_SCOPE and is only reachable via local AF_TIPC sockets on the same node; remote TIPC/UDP peers cannot connect to topsrv.\nAC:L - The attacker controls both sides of the race by connecting to topsrv (queuing accept work) and destroying their network namespace; pending work flushed after listener is nulled makes the crash reliably triggerable.\nPR:L - An unprivileged user can create a user+network namespace, use AF_TIPC with no capability checks to connect to topsrv, and tear down the netns to hit tipc_topsrv_stop\u2014matching other tipc topsrv netns races scored PR:L.\nUI:N - No victim action is required; the attacker unilaterally opens connections and exits the network namespace.\nS:U - Impact is confined to the host kernel authority (DoS or local privilege escalation via UAF); there is no VM/IOMMU/sandbox boundary crossing.\nC:H - Vulnerable tipc_topsrv_stop() calls sock_release() on the listener before tipc_topsrv_work_stop(), so a concurrent tipc_topsrv_accept can use the freed socket\u2014a UAF that enables info disclosure primitives.\nI:H - The same listener-socket UAF (explicitly fixed by deferring sock_release until after the accept worker finishes) can be exploited for heap reuse and arbitrary write/control-flow hijacking.\nA:H - The NULL deref and UAF paths both cause a kernel oops/panic in the tipc_rcv workqueue, fully disrupting system availability."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:59:07.298Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ce69bdac2310152bb70845024d5d704c52aabfc3"
        },
        {
          "url": "https://git.kernel.org/stable/c/24b129aed8730e48f47d852d58d76825ab6f407c"
        },
        {
          "url": "https://git.kernel.org/stable/c/32a3d4660b34ce49ac0162338ebe362098e2f5df"
        },
        {
          "url": "https://git.kernel.org/stable/c/7a939503fc32bff4ed60800b73ff7fbb4aea2142"
        },
        {
          "url": "https://git.kernel.org/stable/c/cedb41664e27b2cae7e21487f1bee22dcd84037d"
        },
        {
          "url": "https://git.kernel.org/stable/c/82cb4e4612c633a9ce320e1773114875604a3cce"
        }
      ],
      "title": "tipc: fix a null-ptr-deref in tipc_topsrv_accept",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50555",
    "datePublished": "2025-10-07T15:21:16.179Z",
    "dateReserved": "2025-10-07T15:15:38.669Z",
    "dateUpdated": "2026-08-05T08:59:07.298Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-50555",
      "date": "2026-09-16",
      "epss": "0.00215",
      "percentile": "0.12019"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-50555\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-10-07T16:15:43.850\",\"lastModified\":\"2026-08-04T10:18:19.357\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ntipc: fix a null-ptr-deref in tipc_topsrv_accept\\n\\nsyzbot found a crash in tipc_topsrv_accept:\\n\\n  KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\\n  Workqueue: tipc_rcv tipc_topsrv_accept\\n  RIP: 0010:kernel_accept+0x22d/0x350 net/socket.c:3487\\n  Call Trace:\\n   \u003cTASK\u003e\\n   tipc_topsrv_accept+0x197/0x280 net/tipc/topsrv.c:460\\n   process_one_work+0x991/0x1610 kernel/workqueue.c:2289\\n   worker_thread+0x665/0x1080 kernel/workqueue.c:2436\\n   kthread+0x2e4/0x3a0 kernel/kthread.c:376\\n   ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306\\n\\nIt was caused by srv-\u003elistener that might be set to null by\\ntipc_topsrv_stop() in net .exit whereas it\u0027s still used in\\ntipc_topsrv_accept() worker.\\n\\nsrv-\u003elistener is protected by srv-\u003eidr_lock in tipc_topsrv_stop(), so add\\na check for srv-\u003elistener under srv-\u003eidr_lock in tipc_topsrv_accept() to\\navoid the null-ptr-deref. To ensure the lsock is not released during the\\ntipc_topsrv_accept(), move sock_release() after tipc_topsrv_work_stop()\\nwhere it\u0027s waiting until the tipc_topsrv_accept worker to be done.\\n\\nNote that sk_callback_lock is used to protect sk-\u003esk_user_data instead of\\nsrv-\u003elistener, and it should check srv in tipc_topsrv_listener_data_ready()\\ninstead. This also ensures that no more tipc_topsrv_accept worker will be\\nstarted after tipc_conn_close() is called in tipc_topsrv_stop() where it\\nsets sk-\u003esk_user_data to null.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/tipc/topsrv.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"0ef897be12b8b4cf297b6016e79ec97ec90f2cf6\",\"lessThan\":\"ce69bdac2310152bb70845024d5d704c52aabfc3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0ef897be12b8b4cf297b6016e79ec97ec90f2cf6\",\"lessThan\":\"24b129aed8730e48f47d852d58d76825ab6f407c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0ef897be12b8b4cf297b6016e79ec97ec90f2cf6\",\"lessThan\":\"32a3d4660b34ce49ac0162338ebe362098e2f5df\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0ef897be12b8b4cf297b6016e79ec97ec90f2cf6\",\"lessThan\":\"7a939503fc32bff4ed60800b73ff7fbb4aea2142\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0ef897be12b8b4cf297b6016e79ec97ec90f2cf6\",\"lessThan\":\"cedb41664e27b2cae7e21487f1bee22dcd84037d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0ef897be12b8b4cf297b6016e79ec97ec90f2cf6\",\"lessThan\":\"82cb4e4612c633a9ce320e1773114875604a3cce\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/tipc/topsrv.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.17\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.17\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.264\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.223\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.153\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.77\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.0.7\",\"lessThanOrEqual\":\"6.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.17\",\"versionEndExcluding\":\"4.19.264\",\"matchCriteriaId\":\"09C4D37C-A518-40EC-BBAC-23AE3A97FF35\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.223\",\"matchCriteriaId\":\"7FE3F72A-5992-4ABB-A961-F834281060A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.153\",\"matchCriteriaId\":\"62052E35-0E91-4164-BB92-83270CEA0113\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.77\",\"matchCriteriaId\":\"756161DE-EFE3-4008-964A-DFE360B188B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.0.7\",\"matchCriteriaId\":\"65D387F0-209C-4EAD-98BA-C4B430A840C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7E331DA-1FB0-4DEC-91AC-7DA69D461C11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"17F0B248-42CF-4AE6-A469-BB1BAE7F4705\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/24b129aed8730e48f47d852d58d76825ab6f407c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/32a3d4660b34ce49ac0162338ebe362098e2f5df\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7a939503fc32bff4ed60800b73ff7fbb4aea2142\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/82cb4e4612c633a9ce320e1773114875604a3cce\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ce69bdac2310152bb70845024d5d704c52aabfc3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cedb41664e27b2cae7e21487f1bee22dcd84037d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-04T22:58:52+00:00",
      "cve": "CVE-2022-50555",
      "id": "CVE-2022-50555",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:fixed": "321",
      "product_status:known_affected": "38",
      "product_status:known_not_affected": "118",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: tipc: fix a null-ptr-deref in tipc_topsrv_accept",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-50555.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T01:22:32Z",
      "cve": "CVE-2022-50555",
      "id": "CVE-2022-50555",
      "initial_release_date": "2025-10-08T23:38:37Z",
      "product_status:known_affected": "130",
      "product_status:known_not_affected": "393",
      "product_status:recommended": "47",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-50555",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-50555.json",
      "version": "11"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.