01 Record

CVE-2022-50677

ipmi: fix use after free in _ipmi_destroy_user()

HighPUBLISHEDCNA: Linux

CNA base score7.0 CVSS v3.xCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

ipmi: fix use after free in _ipmi_destroy_user()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.17% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 6.5% of scored records. A rank, not a probability.

NVD base score

7.0 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-10-15.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-12-09 01:29Z10 MO AGO
Last updated: 2026-10-15 21:41Z13 DAYS AGO
Reserved: 2025-12-09
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 7.0)
CNA CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 227e107e40a662a3a66ba4d9ff070db26e21a51497bfa1dbe589105fd8bfca15

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf9d405a4bd6090ffbf3bba5e2da6b44c0e013cb3 to < 35ad87bfe330f7ef6a19f772223c63296d643172, b642ced2cad496c32ae1f62b85fc395391190820 to < d23006f2a56e11a3103de0ca8b843bf7fd7d76fc, cbb79863fc3175ed5ac506465948b02a893a8235 to < f29d127b372e1b7662397d92341d9f7de198ff99, cbb79863fc3175ed5ac506465948b02a893a8235 to < bfce073089cb81482521c65061835aaa6d1a6cc0, cbb79863fc3175ed5ac506465948b02a893a8235 to < f7fde441198a9ecb130c3ccec91ee2131d6998ee, cbb79863fc3175ed5ac506465948b02a893a8235 to < 1fc9b20a7688000fcf4d7fbaa58e415a3cdda961, cbb79863fc3175ed5ac506465948b02a893a8235 to < a92ce570c81dc0feaeb12a429b4bc65686d17967, 4.19.92 to < 4.19.270, 5.4.7 to < 5.4.229, 5.5—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/35ad87bfe330f7ef6a19f772223c63296d643172
git.kernel.orghttps://git.kernel.org/stable/c/d23006f2a56e11a3103de0ca8b843bf7fd7d76fc
git.kernel.orghttps://git.kernel.org/stable/c/f29d127b372e1b7662397d92341d9f7de198ff99
git.kernel.orghttps://git.kernel.org/stable/c/bfce073089cb81482521c65061835aaa6d1a6cc0
git.kernel.orghttps://git.kernel.org/stable/c/f7fde441198a9ecb130c3ccec91ee2131d6998ee
git.kernel.orghttps://git.kernel.org/stable/c/1fc9b20a7688000fcf4d7fbaa58e415a3cdda961
git.kernel.orghttps://git.kernel.org/stable/c/a92ce570c81dc0feaeb12a429b4bc65686d17967

07 Fixed in

Debian 12

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.