CVE-2022-50677

HighCVSS 7.0/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ipmi: fix use after free in _ipmi_destroy_user()

The intf_free() function frees the "intf" pointer so we cannot dereference it again on the next line.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 9, 2025
Last modified
Oct 15, 2026
NVD status
Deferred

Related CVEs from 2022

CVE-2022-50678In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix invalid address access when enabling SCAN log levelCVE-2022-50679In the Linux kernel, the following vulnerability has been resolved: i40e: Fix DMA mappings leak During reallocation of RX buffers, new DMACVE-2022-506804.8A stored cross-site scripting vulnerability in Kentico Xperience allows administration users to inject malicious scripts via email marketingCVE-2022-506816.1A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via administration input fiCVE-2022-506826.5A CRLF injection vulnerability in Kentico Xperience allows attackers to manipulate URL query string redirects via improper encoding in the rCVE-2022-506835.4A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form redirect URL configurCVE-2022-506846.1An HTML injection vulnerability in Kentico Xperience allows attackers to inject malicious HTML values into form submission emails via unencoCVE-2022-506855.4A stored cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts via XML file uploadsCVE-2022-506867.5An information disclosure vulnerability in Kentico Xperience allows attackers to view sensitive stack trace details via Portal Engine form cCVE-2022-506875.5Cobian Backup 11 Gravity 11.2.0.582 contains a denial of service vulnerability in the FTP password input field that allows attackers to crasCVE-2022-506888.4Cobian Backup Gravity 11.2.0.582 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary coCVE-2022-506895.5Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the pas