PT-2022-7499 · Linux+4 · Linux Kernel+4

Syzbot · Published 2022-02-17 · Updated 2025-09-29 · CVE-2022-48939

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's bpf component, where batch operations can cause soft lockups due to the lack of schedule points. This can lead to a denial of service. The problem occurs when batch operations process a large amount of data without allowing for scheduling, causing tasks to hang. The maybe wait bpf programs(map) calls from generic map delete batch() can be optimized by moving the call after the loop.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-834

Related Identifiers

ALSA-2025_16880

BDU:2024-06656

CVE-2022-48939

OPENSUSE-SU-2024_3190-1

OPENSUSE-SU-2024_3209-1

OPENSUSE-SU-2024_3483-1

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2024:3190-1

SUSE-SU-2024:3209-1

SUSE-SU-2024:3483-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

Suse

References · 665

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48939.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48939 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48939 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48939 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48939 · Security Note
• https://git.kernel.org/stable/c/8628f489b749a4f9767991631921dbe3fbcdc784 · Patch
• https://git.kernel.org/stable/c/7ef94bfb08fb9e73defafbd5ddef6b5a0e2ee12b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:3190-1 · Vendor Advisory
• https://git.kernel.org/stable/c/75134f16e7dd0007aa474b281935c5f42e79f2c8 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-48939 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3483-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3209-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06656 · Security Note
• https://ubuntu.com/security/CVE-2022-48939 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48939 · Vendor Advisory