Log in Start free

Vulnerability · Published Jun 18, 2025 · Assigned by Linux

CVE-2022-50095posix-cpu-timers: Cleanup CPU timers before freeing them during exec

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 82.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before freeing them during exec Commit 55e8c8eb2c7b ("posix-cpu-timers: Store a reference to a pid not a task") started looking up tasks by PID when deleting a CPU timer. When a non-leader thread calls execve, it will switch PIDs with the leader process. Then, as it calls exit_itimers, posix_cpu_timer_del cannot find the task because the timer still points out to the old PID. That means that armed timers won't be disarmed, that is, they won't be removed from the timerqueue_list. exit_itimers will still release their memory, and when that list is later processed, it leads to a use-after-free. Clean up the timers from the de-threaded task before freeing them. This prevents a reported use-after-free.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.0.2-1DEBIAN-CVE-2022-50095
Debian:13linux6.0.2-1DEBIAN-CVE-2022-50095
Debian:14linux6.0.2-1DEBIAN-CVE-2022-50095
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2022-50095
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50095
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50095
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2022-50095
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2022-50095

Affected products (as reported)

VendorProductVersions
Linux Linux 55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 – before 541840859ace9c2ccebc32fa9e376c7bd3def49055e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 – before 9e255ed238fc67058df87b0388ad6d4b2ef3a2bd55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 – before e8cb6e8fd9890780f1bfcf5592889e1b879e779c55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 – before b2fc1723eb65abb83e00d5f011de670296af0b2855e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 – before e362359ace6f87c201531872486ff295df306d13
Linux Linux 5.7

References