CVE-2022-50677

Updated on 09 Dec 2025

Severity

7.0 High severity

Details

CVSS score
7.0
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

ipmi: fix use after free in _ipmi_destroy_user()

The intf_free() function frees the “intf” pointer so we cannot dereference it again on the next line.

Details

Affected packages:
kernel @ 4.18.0 (+4 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 8 Ready For Release
AlmaLinux 9.2 ESU Planned
RHEL 8 Ready For Release
RHEL 9 Planned
Rocky Linux 8 Ready For Release
Ubuntu 20.04 Planned
Ubuntu 22.04 Planned