PT-2025-18638 · Linux+2 · Linux Kernel+2

Publicado 2025-05-01 · Atualizado 2025-07-16 · CVE-2022-49921

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free issue has been resolved in the Linux kernel's networking scheduler. The problem occurs because the skb cannot be used again after it is passed to qdisc enqueue(). This fix is similar to a previous commit that stored the skb length before calling the child enqueue function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2026-05848

CVE-2022-49921

OESA-2025-1820

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02334-1

Produtos afetados

Astra Linux

Linux Kernel

Suse

Referências · 715

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49921.json · Exploit
• https://suse.com/security/cve/CVE-2022-50083 · Nota
• https://suse.com/security/cve/CVE-2022-50152 · Nota
• https://bugzilla.suse.com/1244984 · Nota
• https://t.me/cvedetector/24247 · Publicação no Telegram
• https://suse.com/security/cve/CVE-2022-49853 · Nota
• https://suse.com/security/cve/CVE-2022-49888 · Nota
• https://bugzilla.suse.com/1242406 · Nota
• https://suse.com/security/cve/CVE-2023-1989 · Nota
• https://lore.kernel.org/linux-cve-announce/2025050108-CVE-2022-49921-e4fc@gregkh · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-50084 · Nota de Segurança
• https://suse.com/security/cve/CVE-2023-3111 · Nota
• https://bugzilla.suse.com/1245183 · Nota
• https://suse.com/security/cve/CVE-2022-49784 · Nota
• https://suse.com/security/cve/CVE-2023-53071 · Nota