Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2022-50062

7.5 · HIGH

In the Linux kernel, the following vulnerability has been resolved: net: bgmac: Fix a BUG triggered by wrong bytes_compl On one of our machines we got: kernel BUG at lib/dynamic_queue_limits.c:27!

Published Jun 18, 2025CWE-617EPSS 0.43%

Overview

CVE-2022-50062 is a high-severity vulnerability. It was published on June 18, 2025 and has a CVSS 3.1 base score of 7.5 (HIGH).

This vulnerability has a CVSS 3.1 base score of 7.5, rated HIGH. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: bgmac: Fix a BUG triggered by wrong bytes_compl

On one of our machines we got:

kernel BUG at lib/dynamic_queue_limits.c:27!

Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM

CPU: 0 PID: 1166 Comm: irq/41-bgmac Tainted: G W O 4.14.275-rt132 #1

Hardware name: BRCM XGS iProc

task: ee3415c0 task.stack: ee32a000

PC is at dql_completed+0x168/0x178

LR is at bgmac_poll+0x18c/0x6d8

pc : [<c03b9430>] lr : [<c04b5a18>] psr: 800a0313

sp : ee32be14 ip : 000005ea fp : 00000bd4

r10: ee558500 r9 : c0116298 r8 : 00000002

r7 : 00000000 r6 : ef128810 r5 : 01993267 r4 : 01993851

r3 : ee558000 r2 : 000070e1 r1 : 00000bd4 r0 : ee52c180

Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none

Control: 12c5387d Table: 8e88c04a DAC: 00000051

Process irq/41-bgmac (pid: 1166, stack limit = 0xee32a210)

Stack: (0xee32be14 to 0xee32c000)

be00: ee558520 ee52c

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/1b7680c6c1f6de9904f1d9b05c952f0c64a03350Refgit.kernel.org/stable/c/ab2b55bb25db289ba0b68e3d58494476bdb1041dRefgit.kernel.org/stable/c/ac6d4482f29ab992b605c1b4bd1347f1f679f4e4Refgit.kernel.org/stable/c/c506c9a97120f43257e9b3ce7b1f9a24eafc3787Refgit.kernel.org/stable/c/da1421a29d3b8681ba6a7f686bd0b40dda5acaf3

How CyberStrike helps

Frequently asked questions

What is CVE-2022-50062?

CVE-2022-50062 is a high-severity vulnerability. It was published on June 18, 2025 and has a CVSS 3.1 base score of 7.5 (HIGH).

How severe is CVE-2022-50062?

This vulnerability has a CVSS 3.1 base score of 7.5, rated HIGH. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.

How do I fix or remediate CVE-2022-50062?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2022-50062?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2022-50062 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related HIGH CVEs from 2022

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999