CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2022-50677: Linux 5.5

CVE-2022-50677. CVSS 3.1 base score 7.0 (HIGH, Source advisory). EPSS 0.00172 (percentile 0.06154), scored 14-Oct-2026.

Affected technology

Linux · f9d405a4bd6090ffbf3bba5e2da6b44c0e013cb3 to before 35ad87bfe330f7ef6a19f772223c63296d643172, b642ced2cad496c32ae1f62b85fc395391190820 to before d23006f2a56e11a3103de0ca8b843bf7fd7d76fc, cbb79863fc3175ed5ac506465948b02a893a8235 to before f29d127b372e1b7662397d92341d9f7de198ff99, cbb79863fc3175ed5ac506465948b02a893a8235 to before bfce073089cb81482521c65061835aaa6d1a6cc0, cbb79863fc3175ed5ac506465948b02a893a8235 to before f7fde441198a9ecb130c3ccec91ee2131d6998ee, cbb79863fc3175ed5ac506465948b02a893a8235 to before 1fc9b20a7688000fcf4d7fbaa58e415a3cdda961, cbb79863fc3175ed5ac506465948b02a893a8235 to before a92ce570c81dc0feaeb12a429b4bc65686d17967, 4.19.92 to before 4.19.270, 5.4.7 to before 5.4.229
Linux

Linux · 5.5
Linux

Component: Not specified by the source
Function: frees
File: drivers/char/ipmi/ipmi_msghandler.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
28.0 /100 (P4)
CVSS 3.1
7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00172 · percentile 0.06154 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2022-50677.html