CVE-2022-50531
kernel: Linux kernel (TIPC): Information disclosure via uninitialized memory in tipc_topsrv_kern_subscr
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 7, 2025
Updated · June 30, 2026
Description
A flaw was found in the Linux kernel's Transparent Inter-Process Communication (TIPC) protocol. This vulnerability allows a local user to disclose sensitive information due to four uninitialized bytes in the sub.usr_handle field within the tipc_topsrv_kern_subscr() function. When a user issues a setsockopt call with SOL_TIPC, these uninitialized bytes can be leaked, leading to information disclosure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CWE-908 · Use of Uninitialized Resource